Investigation of Security Aspect of Cloud Computing

Cloud Computing is an evolving computing pattern in which resources of the computing infrastructure are provided as services over the Internet. This pattern also fetches forth many new challenges for data security and access control when users outsource sensitive data for sharing on cloud servers, which are not within the same trusted domain as data owners. To keep sensitive user data confidential against untrusted servers, existing solutions usually apply more security modes. In this study, we focused on the security aspect of the cloud computing. We proposed a unique extremely of decentralization information accountability context to remain follow from particular usage of the clients’ information within the cloud; it aims to ensure more secure usage of data by providing supplementary security mode in the application of system. So we concentrated on three security modes: Accountability, Auditing Mechanism and Automatic Session Expire Technic for the web application. In our application there are three parties, namely: Admin, Owner and User. We reinforce data security over cloud through the mentioned security modes. In our system only legally registered clients are eligible to access to stored data. Moreover, an advanced auditing mechanism is implemented, in which the owner can monitor the data while the admin can observe and control all the system. Furthermore, we included expiry session feature to improve the application security. Above all, this study is suggesting a degree of object-related approach which allows inclusion of our registration and logging procedure together with users’ information and policy. We also leveraged the Java Archive Rar (JAR) programmable capabilities to both create a dynamic and traveling object, and to ensure that any access to users’ data will trigger authentication and automated logging local to the JARs. And as mentioned above to strengthen user’s control, we provided distributed auditing mechanisms. Finally we provided extensive experimental studies that demonstrate the efficiency and effectiveness of the proposed approaches. Keywords: Cloud computing, security, accountability, Java Archive Rar (JAR)