Abstract
Cloud services provide a means to ease information storage and sharing. In the case of Small and Medium Enterprises, this represents a great opportunity to deploy platforms for data exchange without the high costs of traditional Information Technology solutions. Nonetheless, the adoption of the cloud implies a risk in terms of the security and privacy of the stored information assets. This risk is even more relevant when we opt for free cloud storage services. In this work we present Encrypted Cloud, a solution to endow users of free cloud storages with a mechanism to encrypt their information before uploading it. Since data sharing is a must for cloud users, Encrypted Cloud also enables the exchange of cryptographic keys in a secure way. Encrypted Cloud assumes a zero-trust context and correspondingly incorporates a thorough integrity verification protocol. Finally, Encrypted Cloud acts as a central entry point upon multiple free cloud storage services. This being the case, our tool enables users to allocate their resources in multiple cloud storages, and it also makes it possible to define a data redundancy policy.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
Notes
- 1.
[Accessed 2017-04-15].
- 2.
- 3.
- 4.
- 5.
- 6.
- 7.
References
Sanchez-Gomez, A., Diaz, J., Arroyo, D.: Combining usability and privacy protection in free-access public cloud storage servers: review of the main threats and challenges. arXiv preprint arXiv:1610.08727 (2016)
Hoepman, J.H., Jacobs, B.: Increased security through open source. Commun. ACM 50(1), 79–83 (2007)
Maketecheasier: MEGA: The Latest Cloud Storage Service That Beats the Rest. https://www.maketecheasier.com/mega-cloud-storage-review. Accessed 15 Apr 2017
Tamrakar, S., Nguyen, L., Pendyala, P.K., Paverd, A., Asokan, N., Sadeghi, A.R.: OmniShare: Securely accessing encrypted cloud storage from multiple authorized devices. arXiv preprint arXiv:1511.02119 (2015)
Mell, P., Grance, T.: The NIST definition of cloud computing. Special Publication 800-145. NIST (2011)
RSA Laboratories - EMC: What is a digital envelope? https://www.emc.com/emc-plus/rsa-labs/standards-initiatives/what-is-a-digital-envelope.htm. Accessed 15 Apr 2017
Clark, D.D., Wilson, D.R.: A comparison of commercial and military computer security policies. In: 1987 IEEE Symposium on Security and Privacy, p. 184. IEEE (1987)
Vadala, D.: Managing RAID on Linux. O’Reilly Media Inc., Sebastopol (2003)
Diaz, J., Arroyo, D., Rodriguez, F.B.: A formal methodology for integral security design and verification of network protocols. J. Syst. Softw. 89, 87–98 (2014)
Acknowledgements
This work was supported by Comunidad de Madrid (Spain) under the project S2013/ICE-3095-CM (CIBERDINE) and the Spanish Government project MINECO/FEDER DPI2015-65833-P.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2018 Springer International Publishing AG
About this paper
Cite this paper
Sanchez-Gomez, A., Diaz, J., Arroyo, D. (2018). Encrypted Cloud: A Software Solution for the Secure Use of Free-Access Cloud Storage Services. In: Pérez García, H., Alfonso-Cendón, J., Sánchez González, L., Quintián, H., Corchado, E. (eds) International Joint Conference SOCO’17-CISIS’17-ICEUTE’17 León, Spain, September 6–8, 2017, Proceeding. SOCO ICEUTE CISIS 2017 2017 2017. Advances in Intelligent Systems and Computing, vol 649. Springer, Cham. https://doi.org/10.1007/978-3-319-67180-2_66
Download citation
DOI: https://doi.org/10.1007/978-3-319-67180-2_66
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-67179-6
Online ISBN: 978-3-319-67180-2
eBook Packages: EngineeringEngineering (R0)