Keywords Cloud Computing, Data Audit security, E Commerce, Public Key Infrastructure, Security Strategies

Transcription

1 Volume 7, Issue 5, May 2017 ISSN: X International Journal of Advanced Research in Computer Science and Software Engineering Research Paper Available online at: Survey of Security Issues in Cloud based E-Commerce Ruchi Oberoi, Sharmistha Dey MCA Department, IMS Ghaziabad, Uttar Pradesh, India DOI: /ijarcsse/SV7I5/0106 Abstract Electronic commerce, frequently known as e-commerce, has explored a new world before the vendors and customers, created a bigger virtual marketplace. With the widespread use of Internet, the online business and commercial transactions have reached to an extraordinary height, almost covering more than half of the world. Another rapidly emerging technology, cloud, is one of the most popular choices for the IT industry today. Due to its versatility, storage optimization capacity, performance, 24 x 7 service availability cloud has created its great impact in the ground of E Commerce. The present era is cloud era of E Commerce. But cloud, due to its distributive nature, incurs some extra baggage to the E Commerce security issues. This paper focuses on various security issues in Cloud based E Commerce. The main focus will be on cloud based E Commerce services especially for B2B and B2C E Commerce. Keywords Cloud Computing, Data Audit security, E Commerce, Public Key Infrastructure, Security Strategies I. INTRODUCTION Over the last decade, the rapid expansion of the internet technology on e-commerce applications increases the demand of storage, computing power and resource utilization cost of those applications. So, in such a scenario, new Cloud" era of e-commerce is a new business opportunity. There is a new trend for e-commerce companies to implement cloud computing for E Commerce. Most organizations are attracted by this newly evolved technology because cloud can save time and money for them in investing in IT infrastructure Being a robust technology, cloud has 24 x 7 service availability, high storage optimization capacity, virtualization potential, multi tenancy[3] ; which has made it acceptable for the E Commerce industries. Cloud Computing helps to improve the security performance in e-commerce by providing a safer way to store the information. Cloud computing, offering various services like IaaS(Infrastructure as a service),paas (Platform as a service ),SaaS (Software as a service ), is mainly divided into several deployment models like Public cloud, private cloud, hybrid cloud etc. Depending on several deployment models security level varies. IaaS(Infrastructure as a service) - IaaS providers offer the cloud servers and their associated resources via a dashboard and/or API. IaaS clients have direct access to their servers and storage, gaining access to a much higher scalability. Users of IaaS can outsource and build a virtual data center in the cloud and have access to many of the same technologies and resource capabilities of a traditional data center without having to invest in capacity planning or the physical maintenance and management of it [6]. PaaS(Platform as a service)- PaaS provides a platform on which software can be developed and deployed. PaaS providers give clients such an environment in which the operating system and server software, as well as the underlying server hardware and network infrastructure are taken care of, leaving users free to focus on the business side of scalability, and the application development of their product or service[6]. SaaS(Software as a service) In SaaS model, the providers provide the point of access to software running on servers. SaaS is the most familiar form of cloud service for consumers. It moves the task of managing software and its deployment to third-party services. Salesforce, Google Apps, Dropbox are some popular SaaS model. E Commerce has also various categories like B2B (Business to Business), B2C (Business to Customer), C2B(Customer to Business) and C2C(Customer to Customer) etc. Figure I: Type of E Commerce models 2017, IJARCSSE All Rights Reserved Page 823

2 B2B (Business-to-Business) - Companies doing business with each other such as manufacturers selling to distributors and wholesalers selling to retailers. Pricing is based on quantity of order and is often negotiable. Example: Ferguson. Figure II: B 2 B E Commerce Model B2C (Business-to-Consumer) - Businesses selling to the general customer online using web portal and softwares.example:flipcart,amazon C2B (Consumer-to-Business)- A consumer posts his project with a set budget online and within hours companies review the consumer's requirements and bid on the project. Example: Online job portal like naukri.com or shinejobs.com C2C (Consumer-to-Consumer)- There are many sites offering free classifieds, auctions, and forums where individuals can buy and sell thanks to online payment systems like PayPal where people can send and receive money online with ease. Example: ebay, olx, magicbricks.com etc. Cloud Is A Good Platform For E-Business due to the following reasons: (a) On-demand flexibility and scalability The flexibility and scalability of Cloud service is used for growing E- business [5]. (b) Increased business agility A vendor s agility in opening new shop, supply chain management, and increase competitiveness, and reducing cost of ownership that all becomes easy using cloud [5]. (c) Uptime and a smooth customer journey Customer can expediently access online apps using cloud. Moreover cloud is such a platform where customer can easily access online applications and compare the product s price of various vendors, explore several brands for same product. [4] II. RELATED BACKGROUND STUDY Xiao feng Wang, in his paper entitled as Cloud Computing Security of E-commerce Environment, focuses on the impact of cloud in a popular application like E Commerce[5]. The author has very clearly discussed the issues for E Commerce platform based on cloud computing. But the author is a little bit of silent about the accountability of the particular authorities for typical E Business problems in a distributive environment like cloud. In another paper, Privacy Preservation of Data in Amalgamation with Cloud Computing and E-commerce, author Kanchan Mahale has illustrated The idea of Cloud Computing and its privacy issues, especially in E Commerce application, but the main drawback of this paper is that it is based on secondary data only[4].according to the author, for an economic growth of E-businesses, use of Cloud Computing is a must. The main objective of this paper was to judge the influence of Cloud computing on E-commerce, after thorough testing of safety and consistency of the infrastructure, in the major functional areas of E Commerce in Cloud like CRM, HR, Accounting and much more. According to author, integration of E-Commerce and Cloud Computing is beneficial for the rapid growth of the world economy. Juncai, S., and Shao, Q., in Based on Cloud Computing Ecommerce Models and Its Security has analysed various cloud E Commerce model with their security aspects[7]. In this article the problem of environmental cost in case of cloud based E Commerce application has been discussed. This paper focuses on protection of both data privacy as well as the data dissemination from the network security point of view. In another paper entitled as Data security and 2017, IJARCSSE All Rights Reserved Page 824

3 influence of Cloud computing in Electronic Commerce Industry, Roy, Sanghita, and Indrajit Sinha have discussed the concepts of cloud computing and on the basis of this issue analyzes its impact on E-commerce industry and how traditional E-commerce businesses and industries are influenced by cloud computing[1]. Based on the survey we can conclude that the security and privacy issues related to cloud based E Commerce needs to be explored more and on the network point of view as well as from application point of view, it should be analysed as cloud combining with E Commerce is a good opportunity for the business industries. III. SECURITY ISSUES FACED BY E-COMMERCE IN CLOUD COMPUTING ENVIRONMENT Security of the data on a cloud is a big concern. Although CSPs always says that the information of the clients are stored securely on the cloud still e-commerce companies and cloud end-users worry about the security of the data since their sensitive information are in the hands of the cloud service providers. Since both Cloud Computing and e- commerce have security problems, this issue may be the most serious one that makes customers hesitate to implement Cloud E-commerce. Since most of the customers don t have prior experience of using cloud they fear that they can lose control of their data[9]. Due to the storage of large amount of data related to business on the cloud system, and further this data is transmitted and processed, and if there is any problem, the risk involved will be much higher in the cloud computing based E-commerce model than traditional E-commerce model. Although in a cloud computing model data can be unified managed, real time monitoring of the security so as to get maximum protection of the e-commerce business information. But with the complexity of the cloud computing and user s dynamic factors, many new security problems are faced by E- commerce companies to build e-commerce platforms. As the cloud computing model is based on E-commerce platforms where all data is stored in the cloud, the e-commerce companies are worried about the cloud computing security of the data as they are unable to supervise the sensitive information of the business Data Storage Risk: One of the major concern of Cloud computing based on E-commerce model is the data security. In Cloud computing, enterprise data centers save a large amount of corporate private data containing customer s information, financial information, key business processes etc. All this information is stored in the cloud side. This confidential information cannot be monitored by the e-commerce business. E-commerce companies are normally concerned about how cloud computing service providers to ensure that the confidential corporate data is not illegal to collect, process and use., their residual data will not reveal sensitive information, and also they are worried that whether there are appropriate measures to ensure normal operation of the e-commerce system in case of natural disasters, hardware failures etc[5]. As cloud computing uses virtual computer technology in which user s personal data is kept on various virtual data centers which may cross international boundaries. E-commerce companies who are using cloud computing services are not clear about where their data is stored and they don t even know in which country their data is located. And also the cloud computing environment and data are shared by multiple users so the e-commerce companies are concerned about whether their own data and other user s data are creating confusion? And also whether their data is encrypted? 3.2 Data Transmission security: In the cloud computing model, as the Business data is transmitted to the cloud side over the internet, the e- commerce companies are often concerned about the fact that data in the network transmission should be encrypted and should be strictly confidential without being misused. 3.3 Data Audit security: When the enterprise manages internal data, in order to ensure the accuracy of the data, it tends to introduce the third party certification bodies to audit or certification. But in the cloud computing environment, the cloud computing service providers ensures that there should be no risk of the business data. They also provide the necessary information support to help third party organizations for the generation of data security and accuracy of the design to achieve corporate compliance requirements. In the process of the sustainable development of companies certified cloud computing service providers, how to guarantee that the cloud computing service providers will provide useful data without compromising the safety of other existing customers, letting the business to choose a long term presence, technical strength of the cloud computing service providers to service delivery would be the security risk[5]. 3.4 Relevant Laws and Regulations are not perfect: As we know that cloud computing and e-commerce is a new concept, the associated laws of cloud computing and e-commerce is not perfect. In the service agreement, it is the responsibity of the cloud system service providers to avoid most of the risk but there is no assurance to any data violation and data destruction. It assumes a legal responsibility or obligation to act. According to the user s perception, cloud providers should bear all the responsibility for security. So in case of a security issue, it can lead to both sides of the dispute[5]. 3.5 Viruses and Hackers are more secretive: Hackers can take the benefit of the emerging technologies such as virtualization, to write to a virtual machine in the form of malicious software that allows user to be more difficult to detect and remove. At the same time, the use of 2017, IJARCSSE All Rights Reserved Page 825

4 leased virtual machines hides their actual identity, making it difficult to be tracked. These data security e-commerce businesses will bring great harm. Hence, more effective approaches should be adopted to prevent such attacks [5]. IV. E-COMMERCE SECURITY STRATEGY OF CLOUD COMPUTING: A STUDY E-COMMERCE E-commerce platform which is based on the Cloud Computing solves the four types of E-Commerce Security Risks. Since with the starting of the internet, we only used to consider the convenience, openness which makes the internet vulnerable to the hackers leading of destruction of network information system, information disclosure. Therefore, in general there are four types of e-commerce security risk. They are Information capture and steal, Information tampering, information fraud, transaction repudiation. Therefore, the security policy design is based on cloud- computing platform. Firstly, Public Key Infrastructure (PKI) technology is the core information security technology and it is the key to e-commerce and infrastructure technology. PKI technology can greatly reduce the e-business risk disclosure of confidential information. It makes that the person who are not authorized will not steal the data in the cloud storage and transmission, illegal tampering of information thus it guarantees the confidentiality, integrity and effectiveness of the safe operation of the e-commerce. Secondly, the Private cloud needs to be established. Private cloud is a cloud computing service provider for business in the construction of its internal proprietary cloud computing system. E-commerce businesses can put a noncritical business on the cloud platform, and put the core and the key part of the business on the private cloud. Thus, companies can bring in more of authentication, data isolation and other security technologies to ensure data security of the confidential information in the cloud. a. E-commerce Platform based on Cloud Computing solves the storage of Information and Data Security Issues: The cloud computing service providers should adopt a more safe and effective storage technology in case of natural disaster, hardware failures, and damage of other facilities. In case if the master is fails or damaged, it should instantaneously switch to another set of mirrored devices. In the mean time, e-commerce companies, also needs to regularly backup the important data. b. E-Commerce Platform Based on Cloud Computing Solves Scientific Service Provider Selection: Before building e-commerce platform based on cloud computing, e-commerce businesses should be based on their own needs to choose a larger and better cloud computing service providers, asked in detail about the data stored, recognition in the event of termination of the cloud computing services or service provider acquired by another company in such circumstances, their data will not be affected. c. E-Commerce Platform Based on Cloud Computing Solves the improvement of relevant laws and standards: As we know that cloud computing includes a wide range, so the legal agreement is required so as to protect the global e-commerce businesses and the interest of cloud computing providers. The agreement should contain the details about the level of monitoring and measurement services, duties and responsibilities of the cloud computing users and the suppliers, disaster recovery and compensation and other issues. This will lead to provision of better services by cloud computing service providers. V. CONCLUSION As we know that it is a new trend for e-commerce companies to adopt Cloud Computing. Most of the companies are fascinated by cloud computing because cloud can save time and money for them in investing in IT infrastructure. There is no doubt that, this is the biggest benefit brought by cloud computing, but cloud computing also brings in lot of other benefits, As we know that it is quite important for e-commerce companies to keep their customer s personal data secure. Although cloud computing helps to improve the security in e-commerce by providing a safer way to store the information but there are some issues that needs to pay attention. But at the same time, it has also brought new e-business challenges. In order to use cloud computing effectively, information and knowledge must flow easily and securely to and from the user, and these valuable assets must be saved securely and should be backed up and protected from disaster from time to time. E-business security policy which is based on cloud computing platform must take full account of the user, e-commerce companies, cloud computing service providers, network operators, third party certification bodies and other parties who are interested,in order to ensure security of e-commerce operations. It must also solve four e- commerce security risks storage of information and data security issue, cloud computing service providers and other scientific issues. Simultaneously, promoting e-commerce standard using the cloud computing platform, by improving the relevant laws and regulations, using the legal system leading to sustainable development. REFERENCES [1] Roy, Sanghita, and Indrajit Sinha, "Data security and influence of Cloud computing in Electronic Commerce Industry." International Journal of Computer Applications 88.6 (2014). [2] Sah, Pradeep. Enhance Cloud Computing Web Security With The E-commerce Architecture Framework International Journal of Trends in Computer Science (2013). [3] P. Mell and T. Grance, "Draft NIST working definition of cloud computing - v15," 21. Aug 2009 [4] Kanchan Mahale, Privacy Preservation of Data in Amalgamation with Cloud Computing and E-commerce, MIT- SOM PGRC KJIMRP National Research Conference (Special Issue),2016 [5] Xiao feng Wang, Cloud Computing Security of E-commerce Environment, Journal of Applied Mechanics and Materials,2013, pp: , IJARCSSE All Rights Reserved Page 826

5 [6] Retrieved from accessed on 28 th April, 2016: pm, India [7] Juncai, S., and Shao, Q. Based on Cloud Computing Ecommerce Models and Its Security, International Journal of e-education, e-business, e-management and e-learning,, 2011, pp. 2 [8] Venkateshwarlu, Uppunuthula, and Puppala Priyanka. "Survey on Secure Data Mining in Cloud Computing." International Journal of Advanced Research in Computer Science & Technology, [9] Das Indrajit Cloud-e commerce: Synthetic platform for ecommerce transactions and services International Journal of Latest Trends in Engineering and Technology (IJLTET), , IJARCSSE All Rights Reserved Page 827