New observation on one cloud auditing scheme: Attacks,improvement and its application

Abstract

Background

In recent years, cloud computing and cloud storage technologies have developed rapidly, and effectively verifying the integrity of cloud storage data has become the focus of researchers’ attention.

Objective

To propose an improved scheme for overcoming the security problems in the scheme proposed by Imad El Ghoubach et al. in 2021. To discuss the application of the improved scheme in unmanned aerial vehicles (UAVs).

Methods

Through the cryptographic analysis of the original scheme and the improved scheme, it is pointed out that the original scheme has security problems, and the improved scheme is safe and correct. Through experimental simulation, the calculation cost of the original scheme and the improved scheme is compared.

Results

We point out that the original scheme cannot resist the collusion attack between the third-party auditor (TPA) and the cloud server provider (CSP), and TPA can forge the data block tags through the information provided by CSP. At the same time, the TPA can recover the user's data blocks using the evidence provided by the CSP.

Conclusions

The scheme proposed by Imad El Ghoubach et al. in 2021 is not safe. The improved scheme can overcome the security problems and can be applied to UAVs.

Keywords

cloud computing data integrity auditing cloud storage bilinear mapping

Get full access to this article

View all access options for this article.

References

Ogiela

. Biometric methods for advanced strategic data sharing protocols. In: 2015 9th international conference on innovative mobile and internet services in ubiquitous computing (IMIS), Blumenau, Santa Catarina, Brazil, 8–10 July, 2015, pp.179–183. Piscataway, NJ: IEEE.

Ogiela

Koptyra

. False and multi-secret steganography in digital images. Soft Comput 2015; 19: 3331–3339.

El Ghoubach

Abbou

Mrabti

. A secure and efficient remote data auditing scheme for cloud storage. J King Saud Univ Comput Inf Sci 2021; 33: 593–599.

Deswarte

Quisquater

Saïdane

. Remote integrity checking. In: Proceedings of the sixth working conference on integrity and internal control in information systems. Lausanne, Switzerland, 13–14 November 2003, pp.1–11. Boston, MA: Springer.

Ateniese

Burns

Curtmola

, et al. Provable data possession at untrusted stores. In: Proceedings of the 14th ACM conference on computer and communications security (CCS), Alexandria, VA, USA, 29 October–2 November 2007, pp.598–609. New York, NY: ACM.

Juels

Burton

Kaliski

. PORs: proofs of retrievability for large files. In: Proceedings of the 14th ACM conference on computer and communications security (CCS), Alexandria, VA, USA, 29 October–2 November 2007, pp.584–597. New York, NY: ACM.

Wang

. Oruta: privacy-preserving public auditing for shared data in the cloud. IEEE Trans Cloud Comput 2014; 2: 43–56.

Ateniese

Pietro

Mancini

. Scalable and efficient provable data possession. In: Proceedings of the 4th international conference on security and privacy in communication networks (SecureComm), Istanbul, Turkey, 22–25 September 2008, pp.1–10. New York, NY: ACM.

Erway

Kupccu

Papamathou

. Dynamic provable data possession. In: Proceedings of the 16th ACM conference on computer and communications security (CCS 2009), Chicago, USA, 9–13 November 2009, pp.213–222. New York, NY: ACM.

10.

Wang

, et al. Enabling public verifiability and data dynamics for storage security in cloud computing. In: Computer security ESORICS 2009, Saint-Malo, France, 21–25 September 2009, pp.355–370. Berlin, Heidelberg: Springer.

11.

Wang

Ren

. Privacy-preserving public auditing for data storage security in cloud computing. In: Proceedings of the 29th conference on computer communications (INFOCOM2010), San Diego, USA, 15–19 March 2010, pp.1–9. San Diego, CA: IEEE.

12.

Shacham

Waters

. Compact proofs of retrievability. J Cryptol 2013; 26: 442–483.

13.

Wang

. Oruta: privacy-preserving public auditing for shared data in the cloud. IEEE Trans Cloud Comput 2014; 2: 43–56.

14.

Wang

H-F

Z-H

Zhang

, et al. Batch auditing supporting fast searching invalid files in cloud storage. Ji Suan Ji Xue Bao/Chin J Comput 2017; 40: 2338–2351.

15.

Yang

Chen

Xiang

. Blockchain-based publicly verifiable data deletion scheme for cloud storage. J Netw Comput Appl 2018; 103: 185–193.

16.

Tian

Liu

Niu

. Lightweight dynamic integrity auditing scheme for cloud data of ubiquitous power internet of things. Ji Suan Ji Xue Bao/Chin J Comput 2020; 43: 2298–2314.

17.

Yang

Weng

, et al. Public auditing scheme for industrial internet data based on smart contracts. Ruan Jian Xue Bao/J Software 2023; 34: 1491–1511 (in Chinese).

18.

Wang

Yang

, et al. Efficient certificateless public integrity auditing of cloud data with designated verifier for batch audit. J King Saud Univ Comput Inf Sci 2022; 34: 8079–8089.

19.

Wang

, et al. An improved multi-copy cloud data auditing scheme and its application. J King Saud Univ Comput Inf Sci 2023; 35: 120–130.

20.

Jiang

Wang

, et al. Proof of storage with corruption identification and recovery for dynamic group users. Chin J Network Inf Secur 2022; 8: 75–87.

21.

Song

Hua

Zheng

, et al. Blockchain-based deduplication and integrity auditing over encrypted cloud storage. IEEE Trans Dependable Secure Comput 2023; 20: 4928–4945.

22.

Ajjarapu

Pasupuleti

. Blockchain based certificateless privacy preserving public auditing for cloud storage systems. In: 2022 seventh international conference on parallel, distributed and grid computing (PDGC), Solan, India, 25–27 November 2022, pp.286–291. Piscataway, NJ: IEEE.

23.

Wang

Guan

Chen

, et al. Enabling integrity and compliance auditing in blockchain-based GDPR-compliant data management. IEEE Internet Things J 2023; 10: 20955–20968.