A New Trusted and Collaborative Agent Based Approach for Ensuring Cloud Security

TL;DR

This paper introduces a novel agent-based framework called WAY that enhances cloud security by monitoring trustworthiness and activities at multiple levels, aiming to protect data, network, and infrastructure in cloud environments.

Contribution

It proposes a new trusted, collaborative, two-tier agent framework for comprehensive security in heterogeneous cloud platforms, integrating trust assessment and activity monitoring.

Findings

Framework effectively monitors unauthorized access and privileged instructions.

Trust updates based on network activities enhance security.

Ensures privacy at both user and provider levels.

Abstract

In order to determine the user's trust is a growing concern for ensuring privacy and security in a cloud computing environment. In cloud, user's data is stored in one or more remote server(s) which poses more security challenges for the system. One of the most important concerns is to protect user's sensitive information from other users and hackers that may cause data leakage in cloud storage. Having this security challenge in mind, this paper focuses on the development of a more secure cloud environment, to determine the trust of the service requesting authorities by using a novel VM (Virtual Machine) monitoring system. Moreover, this research aims towards proposing a new trusted and collaborative agent-based two-tier framework, titled WAY (Who Are You?), to protect cloud resources. The framework can be used to provide security in network, infrastructure, as well as data storage in a heterogeneous cloud platform. If the trust updating policy is based on network activities, then the framework can provide network security. Similarly, it provides storage security by monitoring unauthorized access activities by the Cloud Service Users (CSU). Infrastructure security can be provided by monitoring the use of privileged instructions within the isolated VMs. The uniqueness of the proposed security solution lies in the fact that it ensures security and privacy both at the service provider level as well as at the user level in a cloud environment.