Enhancing Cloud Storage Security Against EDoS Attacks using Black-Box CP-ABE for Resource Tracking and Access Control

M. Ramana Kumar

Author(s)

M. Ramana Kumar Dept. of CSE, Kommuri Pratap Reddy Institute of Technology, Hyderabad, Telangana, India.

Abstract

Cloud computing is powerful, but without user-to-cloud controllability, people cannot trust cloud companies to hold privacy-sensitive data. Encrypted data is outsourced to maintain privacy. Ciphertext-Policy Attribute-based Encryption (CP-ABE) allows fine-grained, owner-centric access control for sharing encrypted files. This is not safe enough against other attacks. Many prior approaches did not allow the cloud to validate downloader decryption. Thus, all cloud storage users should have access to these files. Malicious attackers can download hundreds of files to perform EDoS attacks, which drain cloud resources. Payers of cloud services cover costs. Moreover, the cloud provider acts as accountant and resource use fee payer, denying data owners transparency. Real-world public cloud storage should address these issues. We present a technique to protect encrypted cloud storages from EDoS attacks and track resource usage. It uses black-box CP-ABE techniques and follows its arbitrary access policy. Two protocols for distinct situations are presented, followed by performance and security analysis.

Publication Details

Page(s) 2053-2059

DOI DOI not available

Published Journal: International Journal of Communication Networks and Information Security, Volume: 16, Issue: 4, Year: 2024

Request the full text from PASTIC

Keywords

data security, cloud storage, Data access control, Compression algorithm., Bloom filtering

References

Bethencourt J.,Sahai A.,Waters B.,Sahai A.,Waters B.,Goyal V.,Pandey O.,Sahai A.,Waters B.,Yu S.,Wang C.,Ren K.,Waters B.,Li W.,Xue K.,Xue Y.,Hong J.,Phuong T. V. X.,Yang G. .2016 .Hidden ciphertext policy attribute-based encryption under standard assumptions. ” IEEE Transactions on Information Forensics and Security, 27(5) : 1484-1496.

Yang K.,Jia X.,Ren K.,Xue K.,Xue Y.,Hong J.,Li W.,Yue H.,Wei D. S.,Hong P. .2017 .Robust and auditable access control with multiple attribute authorities for public cloud storage. ” IEEE Transactions on Information Forensics and Security, 12(4) : 953-967.

Peng T.,Leckie C.,Ramamohanarao K. .2007 .Survey of network-based defense mechanisms countering the DoS and DDoS problems,” ACM Computing Surveys. , 39(1) : 3.

Idziorek J.,Tannian M. .2011 .Exploiting cloud utility models for profit and ruin. in Proceedings of 2011 IEEE International Conference on Cloud Computing (CLOUD2011), : .

Yu S.,Tian Y.,Guo S.,Wu D. O. .2014 .Can we beat DDoS attacks in clouds?” IEEE Transactions on Parallel and Distributed Systems. , 25(9) : 2245-2254.

Chen Q.,Lin W.,Dou W.,Yu S. .2011 .CBF: a packet filtering method for DDoS attack defense in cloud environment. in Proceedings of IEEE Ninth International Conference on Dependable, Autonomic and Secure Computing (DASC2011), : 427-434.

Hoff C. . .Cloud computing security: From DDoS (distributed denial of service) to EDoS (economic denial of sustainability. , : 66.