More Related Content
What's hot (19)
Viewers also liked (18)
Similar to Towards secure and dependable storage service in cloud (20)
Recently uploaded (20)
Towards secure and dependable storage service in cloud
- 1. PRESENTED BY, SIBISAKKARAVARTHY.J SHAKIL AHAMED.M
- 2. INTRODUCTION EXISTING SYSTEM PROPOSED SYSTEM S/W REQUIREMENTS H/W REQUIREMENTS MODULES DESCRIPTION MODULES ALGORITHMS
- 3. ABSTRACT: We investigate the problem of data security in cloud data storage, which is essentially a distributed storage system. We propose flexible distributed storage integrity auditing mechanism, utilizing the homomorphic token and distributed erasure-coded data. The proposed design allows users to audit the cloud storage with very lightweight communication and computation cost. The auditing result not only ensures strong cloud storage correctness guarantee, but also simultaneously achieves fast data error localization, i.e., the identification of misbehaving server. Considering the cloud data are dynamic in nature, the proposed design further supports secure and efficient dynamic operations on outsourced data, including block modification, deletion, and append. Analysis shows the proposed scheme is highly efficient and resilient against Byzantine failure, malicious data modification attack, and even server colluding attacks.
- 4. The importance of ensuring the remote data integrity has been highlighted by the following research works under different system and security models. These techniques, while can be useful to ensure the storage correctness without having users possessing local data, are all focusing on single server scenario. They may be useful for quality-of-service testing, but does not guarantee the data availability in case of server failures. In this system we doesn’t have any correctness measure of data.,i.e, correctness measure in the sense orginal data what user has stored
- 5. Cloud storage enables users to remotely store their data and enjoy the on-demand high quality cloud applications without the burden of local hardware and software management. To achieve the assurances of cloud data integrity and availability and enforce the quality of dependable cloud storage service for users, we propose an effective and flexible distributed scheme with explicit dynamic data support, including block update, delete, and append. We rely on erasure-correcting code in the file distribution preparation to provide redundancy parity vectors and guarantee the data dependability. By utilizing the homomorphic token with distributed verification of erasure-coded data, our scheme achieves the integration of storage correctness insurance and data error localization, i.e., whenever data corruption has been detected during the storage correctness verification across the distributed servers, we can almost guarantee the simultaneous identification of the misbehaving server(s).
- 7. System Model: A representative network architecture for cloud storage service architecture is illustrated in this module. Three different network entities can be identified as follows: User: An entity, who has data to be stored in the cloud and relies on the cloud for data storage and computation, can be either enterprise or individual customers. Cloud Server(CS) An entity, which is managed by cloud service provider (CSP) to provide data storage service and has significant storage space and computation resources (we will not differentiate CS and CSP hereafter.). Third Party Auditor(TPA) An optional TPA, who has expertise and capabilities that users may not have, is trusted to assess and expose risk of cloud storage services on behalf of the users upon request.
- 8. From user’s perspective, the adversary model has to capture all kinds of threats towards his cloud data integrity. Because cloud data do not reside at user’s local site but at CSP’s address domain, these threats can come from two different sources: internal and external attacks. For internal attacks, a CSP can be self-interested, untrusted and possibly malicious. Not only does it desire to move data that has not been or is rarely accessed to a lower tier of storage than agreed for monetary reasons, but it may also attempt to hide a data loss incident due to management errors, Byzantine failures and so on. For external attacks, data integrity threats may come from outsiders who are beyond the control domain of CSP, for example, the economically motivated attackers.
- 9. Towards Third Party Auditing As discussed in our architecture, in case the user does not have the time, feasibility or resources to perform the storage correctness verification, he can optionally delegate this task to an independent third party auditor, making the cloud storage publicly verifiable. However, as pointed out by the recent work , to securely introduce an effective TPA, the auditing process should bring in no new vulnerabilities towards user data privacy. Namely, TPA should not learn user’s data content through the delegated data auditing. Now we show that with only slight modification, our protocol can support privacy-preserving third party auditing
- 10. Processor : Intel Pentium IV Processor Ram : 512MB. Hard Disk : 40 GB. Compact Disk : 650 MB. Input device : Standard Keyboard and Mouse. Output device : VGA and High Resolution Monitor. Operating System : Windows XP.
- 11. Language : JAVA Version : JDK 1.6 User Interface : Java Swings Inputs : Files
- 12. There are three algorithms to be used, such that, Token pre-computation Correctness verification and Error localization Error recovery.
- 13. Before file distribution the user pre-computes a certain number of short verification tokens on individual vector. User wants to make sure the storage correctness for the data in the cloud, he challenges the cloud servers with a set of randomly generated block indices. Each cloud server computes a short “signature” over the specified blocks and returns them to the user.
- 14. Error localization is a key prerequisite for eliminating errors in storage systems. Our scheme outperforms those by integrating the correctness verification and error localization (misbehaving server identification) in our challenge-response protocol: The response values from servers for each challenge not only determine the correctness of the distributed storage, but also contain information to locate potential data error(s).
- 15. the user can reconstruct the original file by downloading the data vectors from the first m servers, assuming that they return the correct response values.\ that our verification scheme is based on random spot-checking, so the storage correctness assurance is a probabilistic one. the data corruption is detected, the comparison of pre-computed tokens and received response values can guarantee the identification of misbehaving server(s) (again with high probability),which will be discussed shortly