Protecting Data Access Liabilities in Cloud Computing

Abstract

Cloud computing revolutionizes service provision by delivering virtualized services via the internet. The Cloud, a ubiquitous term for this online space, is managed by service providers. However, users engaging with cloud services face concerns regarding data security and privacy, fearing potential misuse by service providers, who may inadvertently expose sensitive data to unauthorized parties. To address this challenge, we introduce a novel framework called the Cloud Information Accountability (CIA) framework, centered on the concept of data liability. Our framework outlines essential requirements and offers guidelines for achieving robust data accountability in cloud environments. Upon data submission by the owner, the service provider gains full access and control over the data, typically governed by traditional access control mechanisms. To enhance transparency and accountability, we propose an algorithm that automates data access logging via JAR files, providing detailed insights into data usage. Our approach aims to bolster trust, mitigate privacy concerns, and fortify security in cloud computing ecosystems.