Intelligent Transparent Encryption-Decryption as Security-as-a-Service from clouds

摘要

Security-as-a-Service model delivers security as a commodity in form of a cloud service. The security is provided as one of cloud services in place of on-premise security solutions. The initiative proposed here is to provide encryption and decryption as a cloud service in an intelligent and transparent manner. The users can exercise the service by simply using a Web browser. The algorithm is intelligent in a way by classifying the Encryption process into multiple Encryption levels. The levels are classified as per the protection level needed by the user. The levels described here are low, high and custom. A proof of concept (POC) prototype is implemented for Encryption and Decryption as-a-Service from the cloud. A selective range of algorithms are used in the prototype which are appropriate at the specified three levels of classification. The secret key for encryption/ decryption is generated from user's passphrase by using a suitable and proper methodology. The encryption and decryption is done at file level. The objective is also to make the process of Encryption/ Decryption transparent to the user application. The Encryption-Decryption as a Service (ENCaaS) implemented as the cloud service can provide the user with all the advantages offered by Security-as-a-Service (SECaaS). The freshness in the approach is that the POC is integrated with other Security-as-a-Service options to provide a portal through which various security services can be provided. The ENCaaS will help to protect the data in cloud throughout life cycle from data being at rest, data in transit to data in use. The POC of ENCaaS is implemented and it is evaluated using suitable criterions successfully.