Provenance based data integrity checking and verification in cloud environments.
Provenance based data integrity checking and verification in cloud environments.
复制标题
DOI：
10.1371/journal.pone.0177576
复制
发表时间：
2017
期刊：
影响因子：
3.7
通讯作者：
Ahmad A
中科院分区：
文献类型：
--
作者：
Imran M;Hlavacs H;Haq IU;Jan B;Khan FA;Ahmad A
云计算是IT领域的一个新趋势，它将计算和数据从桌面和手持设备分别转移到大规模处理中心和数据中心。它已被提出作为数据外包和按需计算的有效解决方案，以控制企业IT设置和管理成本的上升。然而，随着云平台的使用，用户的数据被移动到远程存储中，使得用户失去对他们的数据的控制。云的这一独特功能正面临着许多安全和隐私方面的挑战，需要清楚地理解和解决。需要解决的一个重要问题是提供数据完整性的证明，即，存储在云存储中的用户数据的正确性。云中的数据在物理上是用户无法访问的。因此，需要一种机制，用户可以检查其有价值数据的完整性是否得到维护或受到损害。为此，提出了一些方法，如镜像，校验和和使用第三方审计员等。然而，这些方法通过维护数据的多个副本使用额外的存储空间，或者需要第三方验证器的存在。在本文中，我们解决了云计算中的数据完整性证明问题，提出了一个方案，通过该方案，用户能够检查存储在云中的数据的完整性。此外，如果发生违反数据完整性的情况，用户可以跟踪。为此，我们利用云计算中一个相对较新的概念，称为“数据来源”。我们的方案是能够减少任何第三方服务的需要，额外的硬件支持和复制的数据项在客户端的完整性检查。
Cloud computing is a recent tendency in IT that moves computing and data away from desktop and hand-held devices into large scale processing hubs and data centers respectively. It has been proposed as an effective solution for data outsourcing and on demand computing to control the rising cost of IT setups and management in enterprises. However, with Cloud platforms user’s data is moved into remotely located storages such that users lose control over their data. This unique feature of the Cloud is facing many security and privacy challenges which need to be clearly understood and resolved. One of the important concerns that needs to be addressed is to provide the proof of data integrity, i.e., correctness of the user’s data stored in the Cloud storage. The data in Clouds is physically not accessible to the users. Therefore, a mechanism is required where users can check if the integrity of their valuable data is maintained or compromised. For this purpose some methods are proposed like mirroring, checksumming and using third party auditors amongst others. However, these methods use extra storage space by maintaining multiple copies of data or the presence of a third party verifier is required. In this paper, we address the problem of proving data integrity in Cloud computing by proposing a scheme through which users are able to check the integrity of their data stored in Clouds. In addition, users can track the violation of data integrity if occurred. For this purpose, we utilize a relatively new concept in the Cloud computing called “Data Provenance”. Our scheme is capable to reduce the need of any third party services, additional hardware support and the replication of data items on client side for integrity checking.