Proposed Framework with Comparative Analysis of Access Control & Authentication based Security Models Employed over Cloud

摘要

Cloud computing is a booming technology defined as abstraction of different computing resources as like hardware or software provided over a network in the form of a specific service. It's a rapidly emerging technology in the market from quite some time now and considerable research work related to its security perspective are going on it. Security of data present over a cloud and accessible to CSP has been considered as a major issue in recent times. These types of services could end up with attacks or threats like malicious insider attack, Man in middle attack and dictionary attacks to name a few. Apart from this providing security to data revolving around the cloud environment is governed with access control security provisions or models implemented over a cloud. In the past, several authors have presented various access control and user authentication models or schemes which are being used over cloud based environments and were either providing secure access control or authentication based security. Some proposed frameworks also provide combination of both access control and authentication based security models which were not that efficient or secure. Here in this paper, initially major access control models and authentication schemes proposed earlier for a cloud environment are analyzed and compared over selected characteristics. Secondly, a Multi-Security Level Based Authentication and Access Control Model (i.e. MLBAAC) is proposed here followed by its hypothetical analysis on above selected characteristics.