A Thorough Trust and Reputation Based RBAC Model for Secure Data Storage in the Cloud
- 17 September 2018
- journal article
- research article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Parallel and Distributed Systems
- Vol. 30 (4), 778-788
- https://doi.org/10.1109/tpds.2018.2870652
Abstract
Cloud computing is a widespread technology, which has attracted much attention nowadays. Among the many criteria that must be considered for data storage in the cloud, access control plays a vital role. Role-based access control (RBAC) is a well-known technique for secure data storage in the cloud. Since the traditional RBAC models are improper for open and decentralized environments, few works have integrated the trust concept into the RBAC model. Nevertheless, they have not fully addressed the required security metrics of a trust-based system. Therefore, in this paper, we first introduce the security goals that should be considered in an efficient trust-based system. Second, we propose a novel trust and reputation based RBAC model that not only can properly withstand the security threats of trust-based RBAC models, but also is scalable as it has reasonable computational cost. Third, we evaluate the proposed model using the famous trust network of advogato dataset. Eventually, we compare the proposed model with recently-published ones in terms of mean absolute error, indirect trust computational cost, and provided features. The achieved results are indicative of the priority and betterment of the proposed model to be employed in real cloud environments.Keywords
This publication has 25 references indexed in Scilit:
- Trust Enhanced Cryptographic Role-Based Access Control for Secure Cloud Data StorageIEEE Transactions on Information Forensics and Security, 2015
- TACO: a novel method for trust rating subjectivity elimination based on Trust Attitudes COmparisonElectronic Commerce Research, 2015
- T-Broker: A Trust-Aware Service Brokering Scheme for Multiple Cloud Collaborative ServicesIEEE Transactions on Information Forensics and Security, 2015
- CloudArmor: Supporting Reputation-Based Trust Management for Cloud ServicesIEEE Transactions on Parallel and Distributed Systems, 2015
- MTBAC: A mutual trust based access control model in Cloud computingChina Communications, 2014
- Cloud Computing Security: A SurveyComputers, 2014
- An access control model for cloud computingJournal of Information Security and Applications, 2014
- Trust-Aware RBACLecture Notes in Computer Science, 2012
- A survey on security issues in service delivery models of cloud computingJournal of Network and Computer Applications, 2011
- Elimination of Subjectivity from Trust RecommendationIFIP Advances in Information and Communication Technology, 2009