Multilevel Security for Cloud Storage

Cloud Computing is a set of Information Technology Services, like network, software system, storage, hardware, software, and resources and these services are provided to a customer over a internet. These services of Cloud Computing are delivered by third party provider who owns the infrastructure. The advantages of cloud storage are easy access means access to your knowledge anywhere, anytime, scalability, resilience, cost efficiency, and high reliability of the data. Because of these advantages each and every organization is moving its data to the cloud, means it uses the storage service provided by the cloud provider. So it is required to protect that data against unauthorized access, modification or denial of services etc. Hence security of cloud means securing the operations and storage of the cloud providers. In this research paper, I propose an algorithm called Multilevel algorithm by using which an unauthorized user cannot access or modify the data or calculations of cloud. The work plan is to eliminate the concerns regarding data privacy using cryptographic algorithms to enhance the security in cloud as per different perspective of cloud customers.

Introduction

Cloud Computing refers to manipulating, configuring, and accessing the hardware and software resources remotely. It offers online data storage, infrastructure, and application. Cloud computing offers platform independency, as the software is not required to be installed locally on the PC. Hence, the Cloud Computing is making our business applications mobile and collaborative. Cloud Computing refers to both the applications delivered as services over the International Journal of Software in the datacenters that provide those services. The services themselves have long been referred to as Software as a Service, so we use that term. The datacenter hardware and software is what we will call a Cloud. When a Cloud is made available in a pay-as-you-go manner to the public, we call it a Public Cloud; the service being sold is Utility Computing. Cloud computing is playing an important role in the IT world due to its revolutionary model of computing as a utility. It emphasizes on increased flexibility, scalability, and reliability, while promising decreased operational and support costs. Cloud computing, as defined by NIST, is a model for enabling always-on, convenient, on-demand network access to a shared pool of computing resources (e.g., storage, applications, services, etc.)· that can be rapidly provisioned and released with minimal management effort or service provider interaction Objective Based on the current status of experimentations carried out in the area of Multilevel Security for Cloud Computing using Cryptography, the following objectives set for the proposed research. To encrypt data at cloud storage both symmetric-key and asymmetric-key algorithms. This paper presents a brief overview and comparison of Cryptographic algorithms, with an emphasis on Symmetric algorithms which should be used for Cloud based applications and services that require data and link encryption.

Methodology

Amazon S3 has a simple web services interface that you can use to store and retrieve any amount of data, at any time, from anywhere on the web. This guide describes how you send requests to create buckets, store and retrieve your objects, and manage permissions on your resources. The guide also describes access control and the authentication process. Access control defines who can access objects and buckets within Amazon S3, and the type of access (e.g., READ and WRITE). The authentication process verifies the identity of a user who is trying to access Amazon Web Services (AWS).

Amazon S3 is intentionally built with a minimal feature set that focuses on simplicity and robustness. Following are some of advantages of the Amazon S3 service: • Create Buckets – Create and name a bucket that stores data. Buckets are the fundamental container in Amazon S3 for data storage. • Store data in Buckets – Store an infinite amount of data in a bucket. Upload as many objects as you like into an Amazon S3 bucket. Each object can contain up to 5 TB of data. Each object is stored and retrieved using a unique developer-assigned key. • Download data – Download your data or enable others to do so. Download your data any time you like or allow others to do the same. • Permissions – Grant or deny access to others who want to upload or download data into your Amazon S3 bucket. Grant upload and download permissions to three types of users. Authentication mechanisms can help keep data secure from unauthorized access. • Standard interfaces – Use standards-based REST and SOAP interfaces designed to work with any Internet-development toolkit. Conclusion Cloud computing is emerging as a new thing and many of the organizations are moving toward the cloud but lacking due to security reasons. So cloud security is must which will break the hindrance the acceptance of the cloud by the organizations. Encryption algorithms play an important role in data security on cloud. But these existing cryptographic algorithms are single level encryption algorithms.

Cyber criminals can easily cracked single level encryption. Hence we propose a system which uses multilevel encryption and decryption to provide more security for Cloud Storage. In our proposed work, only the authorized user can access the data. If some intruder (unauthorized user) tries to get the data directly from the database, he must have to decrypt the data at each level which is a very difficult task. It may be expected that multilevel encryption will provide more security for Cloud Storage than single level encryption.