Improving the Security Performance of Public Clouds Using Attribute Based Access Control in Document Sharing

Transcription

1 Improving the Security Performance of Public Clouds Using Attribute Based Access Control in Document Sharing ABSTRACT: Y.Sandhya*1, DR.M A D R Swamy*2 M.Tech Scholar, Dept of CSE, QISCET, ONGOLE, Dist: Prakasam, AP, India. Professor, Department of CSE, QISCET, ONGOLE, Dist: Prakasam, AP, India Technology and its limitation is today s world one of the best tool to make a sense of re-search which is the green field in the Information Technology or we call automation industry. If we look forward to the best of the Industrial world where Technology is the use of Information technology organization especially service based organization, provides a solution telling so and so high approaches. But We know the crackers and hackers may be ethical or any other which in this paper we have given the cryptographic acknowledgement based solution generated randomly ; but if we the cloud based content sharing is crucial and typically need highly regressed algorithm designed and tested by best well known smart Analyst. If we consider the domain of Banking and financial sector where cloud use is very rare that to a synchronize thread based processing is typically a race condition. Hence we look forward the approach of acknowledgment based efficient and robust approach in the sense of response to client. I.INTRODUCTION As sequencing technologies were leading to an increase in the output of new sequence data, computers with greater memory capacity and computational power were becoming available. With the increased availability of genome sequences and computing power, considerable effort has been focused on developing software tools for automated sequence processing, including functional analyses, feature annotation, and comparison techniques, as well as visualization utilities. Many software tools have been developed to aid with information storage and processing, and there is an active research area in developing new tools. Analysis tools are varied in scope and scale, ranging from scripts operating over flat-files running on a single lab-based PC, to large massively parallelized annotation pipelines. Cloud Based tools perform a wide range of analysis tasks. KEYWORDS: Group key management, privacy, identity, cloud computing, policy, encryption, access control. ISSN: Page 256

2 Fig.1.1 Node Based Data Clustering in Cloud Tools such as GLIMMER, Gene wise, and Inter Pro assist with sequence annotation tasks. Sequence alignment algorithms such as Needleman-Wunsch, Smith-Waterman, and utilities such as Blast and MUMmer allow the automated discovery of sequence similarities to be measured and single nucleotide polymorphisms (SNPs) to be identified. organized into workflows. To address these issues, numerous high-throughput annotation pipelines have been developed that are capable of executing a range of Cloud Based applications on large, high-end dedicated computer clusters consisting of hundreds or thousands of nodes. Cloud Based researchers have a long tradition of sharing data with their peers via the Internet. Initially, cross-project data sharing was achieved predominantly via static or dynamic Web sites. These sites were primarily designed for human interaction, and therefore pose difficulties for effective automated data retrieval. II.RELATED WORK The second problem, complexity, arises from with the logistics of assembling multiple computationally intensive analysis tools to run as a pipeline. As the number of tools that are required to execute in a highthroughput, automated fashion increases, coordination of structured data flows between processes becomes essential. The output of one program may need to be supplied to another as input data. Therefore, in addition to providing scalable execution and data management, software platforms are required that are flexible enough to support and maintain sets of Cloud Based tools Fig.2.1 Model of the Best Shortest Node to Share the Acknowledgment Data extraction from standard web sites often requires the use of screen-scraping techniques, and is therefore fragile, being heavily dependent on the on-screen structure. However, as the number and use of online data resources has increased, it has become increasingly necessary for machines to interact with, and transfer information among, remote resources. With the emergence of Service Oriented ISSN: Page 257

3 Architectures (SOAs) and their supporting technologies, it has now become commonplace to expose Cloud Based analysis applications or results databases as Web services. Web services allow machines to interact with remotely exposed data and analysis tools programmatically, via welldefined service interfaces. III.PROPOSED METHODOLOGY The proposed architecture composes of three main layers; Accounting, Billing and Business Layers. The Accounting layer is responsible for the procedure of collecting and managing the row metering data which will be used by the Billing layer. The Billing layer is responsible for evaluating the Deployment Description (DD) by analyzing the DD from a business perspective to apply business oriented deployment restrictions, verify the amount of available credits, generate a unique identifier for this particular service which will be used in the Accounting, Billing, and Compensation identifier and complete the payment procedure. The Business layer arranges the relationship between the technical issues of the system and the consumers in terms of pricing, invoicing, service management and so forth. To the best of our knowledge there is no existing approach which takes into consideration the building of accounting services, and addresses the issues and challenges related to such a service. However, there are many studies that support our approach to understanding the accounting model of the service provider. For instance, in the author argues that cloud providers should make their services accountable for both the provider and the customer. Also, the authors of suggest that costs can be reduced by building cost aware applications that exploit data usage patterns; for example, by favoring data derivation from raw data against storage of processed data. More importantly, and according to observers in there are hidden costs that the user might incur while consuming a particular resource, so we need to know the provider s accounting model that is applied for each resource. The responder design pattern also provides clearly defined guidelines about which component should host particular types of functionality: management and query functionality should be placed within the Web service component, while computationally-intensive operations should be placed into the compute job component. Fig.3.1 Architecture Model of the Acknowledgement Approach The rigid structure of a responder means that applications can be designed for scalability since the developer knows which parts of ISSN: Page 258

4 the system will take advantage of parallelism and P2P data transfers, and which parts of the system will provide management of centralized structured storage. The Web service abstract class provides programmer hooks for implementing notification message handling, and provides assistance with message serialization and publication. Initial registration assistance is also provided that includes automated registration of the responder with the notification system. Another abstract class is provided for the implementation of compute jobs. A hook with a well-defined contract permits the developer to place computationally intensive operations in the appropriate place. IV.EVOLUATION AND ANALYSIS It has also been shown that the number of computers used as worker nodes can be scaled effectively as long as there is adequate server capacity. Fig Evaluation Compassion of the Acknowledgement with Successes Rate The rate limiting step appears to be the result archival stage, in which many worker nodes require result data to be reliably stored. Here, however, the serverside support can also be extended extensively through the addition of potentially hundreds of archive nodes. The addition of archive nodes requires no reconfiguration other than the deployment of an additional instance of a Web service to a new computer. V.CONCLUSION AND FUTURE WORK Each service provides a particular unit of functionality, whether this is core functionality such as task scheduling or file management, or application domain-specific functionality. Within a functional unit, interactions are typically client-server based, since this is a practical approach for collecting results in a central, coherent location after distributed processing and; servicing data requests and queries from 3 rd party clients. Finally, Security makes used of a decentralized P2P architecture for large-scale file transfers among participating computers. For instance, the use of Service Oriented Architectures (SOAs) facilitates straightforward access to application data via standard Simple Object Access Protocol (SOAP). Although Web services introduce an element of centralization, bottlenecks may be overcome with standard techniques such as service mirroring or database clustering. VI. REFERENCES [1] N. Shang, M. Nabeel, F. Paci, and E. Bertino, A Privacy-Preserving Approach to Policy-Based Content Dissemination, Proc. IEEE 26th Int l Conf. Data Eng. (ICDE 10), [2] Liberty Alliance, [3] OpenID, ISSN: Page 259

5 [4] Microsoft Windows CardSpace, en-us/library/aa aspx, [5] Higgins Open Source Identity Framework, [6] R. Richardson, CSI Computer Crime and Security Survey, ttp:// technical report, Computer Security Inst., [7] Y. Challal and H. Seba, Group key Management Protocols: A Novel Taxonomy, Int l J. Information Technology, vol. 2, no. 2, pp , Dissemination, Proc. IEEE 26th Int l Conf. Data Eng. (ICDE 10), [18] O. Goldreich, Foundations of Cryptography: Basic Tools. Cambridge Univ. Press, AUTHOR PROFILE: Y.SANDHYA, M.Tech Scholar, Dept of CSE, QISCET, ONGOLE, Dist: Prakasam, AP, India. [8] H. Harney and C. Muckenhirn, Group key Management Protocol (GKMP) Specification, technical report, Network Working Group, United States, [9] H. Chu, L. Qiao, K. Nahrstedt, H. Wang, and R. Jain, A Secure Multicast Protocol with Copyright Protection, SIGCOMM Computer Comm. Rev., vol. 32, no. 2, pp , [10] C. Wong and S. Lam, Keystone: A Group Key Management Service, Proc. Int l Conf. Telecomm. (ICT), [11] A. Sherman and D. McGrew, Key Establishment in Large Dynamic Groups Using One-Way Function Trees, IEEE Trans. Software Eng., vol. 29, no. 5, pp , May [12] G. Chiou and W. Chen, Secure Broadcasting Using the Secure Lock, IEEE Trans. Software Eng., vol. 15, no. 8, pp , Aug [13] S. Berkovits, How to Broadcast a Secret, Proc. 10th Ann. Int l Conf. Advances in Cryptology (EUROCRYPT 91), pp , [14] X. Zou, Y. Dai, and E. Bertino, A Practical and Flexible Key Management Mechanism for Trusted Collaborative Computing, Proc. IEEE INFOCOM, pp , Apr [15] A. Shamir, How to Share a Secret, Comm. ACM, vol. 22, no. 11, pp , [16] E.F. Brickell, Some Ideal Secret Sharing Schemes, Proc. Workshop the Theory and Application of Cryptographic Techniques on Advances in Cryptology (EUROCRYPT 89), pp , [17] N. Shang, M. Nabeel, F. Paci, and E. Bertino, A Privacy- Preserving Approach to Policy-Based Content ISSN: Page 260