Security and Privacy in Fog Computing: Challenges

IEEE Access

Volumn 5, Issue , 2017, Pages 19293-19304

  Mukherjee, Mithun ^a,b   Matam, Rakesh ^a   Shu, Lei ^c   Maglaras, Leandros ^d   Ferrag, Mohamed Amine ^e,f   Choudhury, Nikumani ^b   Kumar, Vikas ^g  

^a GUANGDONG UNIVERSITY OF PETROCHEMICAL TECHNOLOGY   (China)

^b INDIAN INSTITUTE OF INFORMATION TECHNOLOGY GUWAHATI   (India)

^c UNIVERSITY OF LINCOLN   (United Kingdom)

^d DE MONTFORT UNIVERSITY   (United Kingdom)

^e UNIVERSITY OF GUELMA   (Algeria)

^f BADJI MOKHTAR UNIVERSITY   (Algeria)

^g Bharat Sanchar Nigam Limited   (India)

Author keywords

Fog; fog computing; fog networking; IoT; privacy; privacy threats; security; security threats

Indexed keywords

AUTHENTICATION; CLOUD COMPUTING; COMPUTER PRIVACY; DATA PRIVACY; DIGITAL STORAGE; ELECTRONIC MAIL; FOG;

COMPUTATIONAL MODEL; EDGE COMPUTING; PRIVACY THREATS; SECURITY; SECURITY THREATS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 85029170433     PISSN: None     EISSN: 21693536     Source Type: Journal    
DOI: 10.1109/ACCESS.2017.2749422     Document Type: Article

References (70)

1. Data Center Companies. Accessed: Jul. 23, 2017. [Online]. Available: https://www.datacenters.com/directory/companies
2. F. Bonomi, R. Milito, J. Zhu, and S. Addepalli, "Fog computing and its role in the Internet of Things," in Proc. 1st Ed. MCC Workshop Mobile Cloud Comput. (MCC), Helsinki, Finland, Feb. 2012, pp. 13-16.
3. Cisco. Cisco Delivers Vision of Fog Computing to Accelerate Value from Billions of Connected Devices. Press Release. Accessed: Jul. 23, 2017. [Online]. Available: https://newsroom.cisco.com/press-release-contenttype=webcontent&articleId=1334100
4. M. Aazam and E. N. Huh, "Fog computing: The cloud-IoT/IoE middle-ware paradigm," IEEE Potentials, vol. 35, no. 3, pp. 40-44, May 2016.
5. OpenFog Consortium. Accessed: Jul. 23, 2017. [Online]. Available: https://www.openfogconsortium.org
6. OpenFog Reference Architecture. Accessed: Jul. 23, 2017. [Online]. Avail-able: https://www.openfogconsortium.org/ra/
7. Akami Cloudlet Overview. Accessed: Feb. 20, 2017. [Online]. Available: https://www.akamai.com/us/en/products/web-performance/cloudlets/
8. Intelligent Edge Intel. Accessed: Feb. 20, 2017. [Online]. Available: https://itpeernetwork.intel.com/extending-intelligence-to-the-edge/
9. M. Chiang and T. Zhang, "Fog and IoT: An overview of research opportu-nities," IEEE Internet Things J., vol. 3, no. 6, pp. 1-11, Dec. 2016.
10. A. Bader, H. Ghazzai, A. Kadri, and M.-S. Alouini, "Front-end intelligence for large-scale application-oriented Internet-of-Things," IEEE Access, vol. 4, pp. 3257-3272, Jun. 2016.
11. B. Varghese, N.Wang, S. Barbhuiya, P. Kilpatrick, and D. S. Nikolopoulos, "Challenges and opportunities in edge computing," in Proc. IEEE Int. Conf. Smart Cloud (SmartCloud), Nov. 2016, pp. 20-26.
12. W. Shi, J. Cao, Q. Zhang, Y. Li, and L. Xu, "Edge computing: Vision and challenges," IEEE Internet Things J., vol. 3, no. 5, pp. 637-646, Oct. 2016.
13. R. Mahmud and R. Buyya. (2016). "Fog computing: A taxon-omy, survey and future directions." [Online]. Available: http://arxiv. org/abs/1611.05539
14. S. Sarkar, S. Chatterjee, and S. Misra, "Assessment of the suitability of fog computing in the context of Internet of things," IEEE Trans. Cloud Comput., to be published.
15. S. Yi, C. Li, and Q. Li, "A survey of fog computing: Concepts, applications and issues," in Proc. Workshop Mobile Big Data (Mobidata), Jun. 2015, pp. 37-42.
16. S. Yi, Z. Qin, and Q. Li, "Security and privacy issues of fog computing: A survey," in Proc. 10th Int. Conf. Wireless Algorithms, Syst., Appl. (WASA), Aug. 2015, pp. 685-695.
17. I. Stojmenovic and S. Wen, "The Fog computing paradigm: Scenar-ios and security issues," in Proc. Federated Conf. Comput. Sci. Inf. Syst. (FedCSIS), Sep. 2014, pp. 1-8.
18. I. Stojmenovic, "Fog computing: A cloud to the ground support for smart things and machine-to-machine networks," in Proc. Austral. Telecommun. Netw. Appl. Conf. (ATNAC), Nov. 2014, pp. 117-122.
19. P. Kumar, N. Zaidi, and T. Choudhury, "Fog computing: Common security issues and proposed countermeasures," in Proc. Int. Conf. System Model-ing Adv. Res. Trends (SMART), Nov. 2016, pp. 311-315.
20. A. Alrawais, A. Alhothaily, C. Hu, and X. Cheng, "Fog computing for the Internet of Things: Security and privacy issues," IEEE Internet Comput., vol. 21, no. 2, pp. 34-42, Mar. 2017.
21. J. Ni, A. Zhang, X. Lin, and X. S. Shen, "Security, privacy, and fairness in fog-based vehicular crowdsensing," IEEE Commun. Mag., vol. 55, no. 6, pp. 146-152, Jun. 2017.
22. M. Xiao, J. Zhou, X. Liu, and M. Jiang, "A hybrid scheme for fine-grained search and access authorization in fog computing environment," Sensors, vol. 17, no. 6, pp. 1-22, Jun. 2017.
23. M. Du, K. Wang, X. Liu, S. Guo, and Y. Zhang, "A differential privacy-based query model for sustainable fog data centers," IEEE Trans. Sustain. Comput., to be published.
24. Y.Wang, T. Uehara, and R. Sasaki, "Fog computing: Issues and challenges in security and forensics," in Proc. IEEE 39th Annu. Comput. Softw. Appl. Conf., vol. 3. Jul. 2015, pp. 53-59.
25. R. K. L. Ko et al., "TrustCloud: A framework for accountability and trust in cloud computing," in Proc. IEEE World Congr. Services, Jul. 2011, pp. 584-588.
26. K. M. Khan and Q. Malluhi, "Establishing trust in cloud computing," IT Prof., vol. 12, no. 5, pp. 20-27, Sep. 2010.
27. Y. W. Law, M. Palaniswami, G. Kounga, and A. Lo, "WAKE: Key management scheme for wide-area measurement systems in smart grid," IEEE Commun. Mag., vol. 51, no. 1, pp. 34-41, Jan. 2013.
28. M. A. Ferrag, L. Maglaras, and A. Ahmim, "Privacy-preserving schemes for ad hoc social networks: A survey," IEEE Commun. Surveys Tuts., to be published.
29. Y. Hong, W. M. Liu, and L. Wang, "Privacy preserving smart meter streaming against information leakage of appliance status," IEEE Trans. Inf. Forensics Security, vol. 12, no. 9, pp. 2227-2241, Sep. 2017.
30. D. Koo and J. Hur, "Privacy-preserving deduplication of encrypted data with dynamic ownership management in fog computing," Future Generat. Comput. Syst., to be published.
31. S. J. Stolfo, M. B. Salem, and A. D. Keromytis, "Fog Computing: Mitigat-ing Insider Data Theft Attacks in the Cloud," in Proc. IEEE Symp. Security Privacy Workshops (SPW), May 2012, pp. 125-128.
32. M. H. Ibrahim, "Octopus: An edge-fog mutual authentication scheme," Int. J. Netw. Security, vol. 18, no. 6, pp. 1089-1101, Nov. 2016.
33. N. H. Motlagh, M. Bagaa, and T. Taleb, "UAV-based IoT platform: A crowd surveillance use case," IEEE Commun. Mag., vol. 55, no. 2, pp. 128-134, Feb. 2017.
34. S. Biggs and S. Vidalis, "Cloud computing: The impact on digital foren-sic investigations," in Proc. IEEE Int. Conf. Internet Technol. Secured Trans. (ICITST), Nov. 2009, pp. 1-6.
35. S. D. Wolthusen, "Overcast: Forensic discovery in cloud environments," in Proc. IEEE 5th Int. Conf. IT Security Incident Manage. IT Forensics, Sep. 2009, pp. 3-9.
36. M. Peng, S. Yan, K. Zhang, and C. Wang, "Fog-computing-based radio access networks: Issues and challenges," IEEE Netw., vol. 30, no. 4, pp. 46-53, Jul. 2016.
37. M. Arrington. (Jul. 2009). In Our Inox: Hundreds of Con-dential Twitter Documents. Accessed: Feb. 12, 2017. [Online]. Available: http://techcrunch.com/2009/07/14/in-our-inbox-hundreds-of-con-dential-twitter-documents/
38. D. Takahashi. (Mar. 2010). French Hacker who Leaked Twitter Doc-uments to Techcrunch is Busted. Accessed: Feb. 20, 2017. [Online]. Available: http://venturebeat.com/2010/03/24/french-hacker-who-leaked-twitter-documents-to-techcrunch-is-busted/
39. P. Allen. (Mar. 2010). Obamas Twitter Password Revealed After French Hacker Arrested for Breaking into U.S. Presidents Account. Accessed: Feb. 12, 2017. [Online]. Available: http://www.dailymail.co. uk/news/article-1260488/Barack-Obamas-Twitter-password-revealed-French-hacker-arrested.html
40. F. Rocha and M. Correia, "Lucy in the sky without diamonds: Stealing con-dential data in the cloud," in Proc. IEEE/IFIP 41st Int. Conf. Dependable Syst. Netw. Workshops (DSN-W), Jun. 2011, pp. 129-134.
41. J. Pepitone. (Jun. 2011). Dropbox's Password Nightmare Highlights Cloud Risks. Accessed: Feb. 12, 2017. [Online]. Available: http://money.cnn. com/2011/06/22/technology/dropbox-passwords/index.htm
42. P. Hu, H. Ning, T. Qiu, H. Song, Y. Wang, and X. Yao, "Security and pri-vacy preservation scheme of face identification and resolution framework using Fog computing in Internet of Things," IEEE Internet Things J., to be published.
43. R. Lu, K. Heung, A. H. Lashkari, and A. A. Ghorbani, "A lightweight privacy-preserving data aggregation scheme for Fog computing-enhanced IoT," IEEE Access, vol. 5, pp. 3302-3312, Mar. 2017.
44. S. Basudan, X. Lin, and K. Sankaranarayanan, "A privacy-preserving vehicular crowdsensing-based road surface condition monitoring system using fog computing," IEEE Internet Things J., vol. 4, no. 3, pp. 772-782, Jun. 2017.
45. J. Liu et al., "Secure intelligent traffic light control using fog computing," Futur Gener. Comput. Syst., to be published.
46. W. K. Ng, Y. Wen, and H. Zhu, "Private data deduplication protocols in Cloud storage," in Proc. 27th Annu. ACM Symp. Appl. Comput. (SAC), Mar. 2012, pp. 441-446.
47. R. Yang, Q. Xu, M. H. Au, Z. Yu, H. Wang, and L. Zhou, "Position based cryptography with location privacy: A step for fog computing," Futur Gener. Comput. Syst., to be published.
48. T.Wang et al., "Trajectory privacy preservation based on a fog structure for Cloud location services," IEEE Access, vol. 5, pp. 7692-7701, May 2017.
49. Y. Huo, C. Hu, X. Qi, and T. Jing, "LoDPD: A location difference-based proximity detection protocol for fog computing," IEEE Internet Things J., to be published.
50. B. Mu and S. Bakiras, "Private proximity detection for convex polygons," Tsinghua Sci. Technol., vol. 21, no. 3, pp. 270-280, Jun. 2016.
51. H. Wang, Z. Wang, and J. Domingo-Ferrer, "Anonymous and secure aggregation scheme in Fog-based public Cloud computing," Futur Gener. Comput. Syst., to be published.
52. M. Kumar, "An enhanced remote user authentication scheme with smart card," Int. J. Netw. Security, vol. 10, no. 3, pp. 175-184, May 2010.
53. R. Lu, Z. Cao, Z. Chai, and X. Liang, "Asimple user authentication scheme for grid computing," Int. J. Netw. Security, vol. 7, no. 2, pp. 202-206, 2008.
54. L. T. Jia, "Efficient nonce-based authentication scheme for session initia-tion protocol," Int. J. Netw. Security, vol. 9, no. 1, pp. 12-16, 2009.
55. C. C. Lee, C. H. Liu, and M. S. Hwang, "Guessing attacks on strong-password authentication protocol," Int. J. Netw. Security, vol. 15, no. 1, pp. 64-67, 2013.
56. Z. M. Fadlullah, M. M. Fouda, N. Kato, A. Takeuchi, N. Iwasaki, and Y. Nozaki, "Toward intelligent machine-to-machine communications in smart grid," IEEE Commun. Mag., vol. 49, no. 4, pp. 60-65, Apr. 2011.
57. S. Zawoad and R. Hasan. (2013). "Cloud forensics: A meta-study of challenges, approaches, and open problems." [Online]. Available: http://arxiv.org/abs/1302.6312
58. D. Birk and C. Wegener, "Technical issues of forensic investigations in cloud computing environments," in Proc. 6th IEEE Int. Workshop Syst. Approaches Digit. Forensic Eng., May 2011, pp. 1-10.
59. W. Delport, M. Kohn, and M. S. Olivier, "Isolating a cloud instance for a digital forensic investigation," in Proc. Inf. Security South Africa Conf. (ISSA), Aug. 2012, pp. 1-7.
60. K. Bilal, S. U. R. Malik, S. U. Khan, and A. Y. Zomaya, "Trends and challenges in cloud datacenters," IEEE Cloud Comput., vol. 1, no. 1, pp. 10-20, May 2014.
61. R. Buyya, C. S. Yeo, and S. Venugopal, "Market-oriented cloud com-puting: Vision, hype, and reality for delivering IT services as comput-ing utilities," in Proc. 10th IEEE Int. Conf. High Perform. Comput. Commun. (HPCC), Sep. 2008, pp. 5-13.
62. B. P. Rimal, E. Choi, and I. Lumb, "A taxonomy and survey of cloud computing systems," in Proc. 5th Int. Joint Conf. INC, Aug. 2009, pp. 44-51.
63. C. Perera, A. Zaslavsky, P. Christen, and D. Georgakopoulos, "Context aware computing for the Internet of Things: A survey," IEEE Commun. Surveys Tuts., vol. 16, no. 1, pp. 414-454, 1st Quart., 2014.
64. G. D. Abowd, A. K. Dey, P. J. Brown, N. Davies, M. Smith, and P. Steggles, "Towards a better understanding of context and context-awareness," in Proc. 1st Int. Symp. Handheld Ubiquitous Comput. (HUC), Sep. 1999, pp. 304-307.
65. L. A. Maglaras, J. Jiang, and T. J. Cruz, "Combining ensemble methods and social network metrics for improving accuracy ofOCSVMon intrusion detection in SCADA systems," J. Inf. Security Appl., vol. 30, pp. 15-26, Oct. 2016.
66. C. Modi, D. Patel, B. Borisaniya, H. Patel, A. Patel, and M. Rajarajan, "A survey of intrusion detection techniques in cloud," Elsevier J. Netw. Comput. Appl., vol. 36, no. 1, pp. 42-57, Jan. 2013.
67. J. Valenzuela, J. Wang, and N. Bissinger, "Real-time intrusion detection in power system operations," IEEE Trans. Power Syst., vol. 28, no. 2, pp. 1052-1062, Nov. 2013.
68. S. Anwar et al., "From intrusion detection to an intrusion response system: Fundamentals, requirements, and future directions," MDPI Algorithms, vol. 10, no. 2, pp. 1-24, Mar. 2017.
69. T. Cruz et al., "A cyber security detection framework for supervisory control and data acquisition systems," IEEE Trans. Ind. Informat., vol. 12, no. 6, pp. 2236-2246, Aug. 2016.
70. R. Marty, "Cloud application logging for forensics," in Proc. ACM Symp. Appl. Comput. (SAC), Mar. 2011, pp. 178-184.