Enhanced Triple Layered Approach for Mitigating Security Risks in Cloud  

作　　者：Tajinder Kumar Purushottam Sharma Xiaochun Cheng Sachin Lalar Shubham Kumar Sandhya Bansal 

机构地区：[1]Computer Science&Engineering Department,Jai Parkash Mukand Lal Innovative Engineering&Technology Institute,Radaur,135133,Haryana,India [2]School of Computer Science&Engineering,Galgotias University,Greater Noida,203201,Uttar Pradesh,India [3]Computer Science Department,Bay Campus Fabian Way,Swansea University,Swansea,SA18EN,UK [4]Department of Engineering and Technology,Gurugram University,Gurugram,122003,India [5]Presidency School of Computer Science,Presidency University,Bangalore,560089,India [6]Maharishi Markendeshwar Engineering College,Maharishi Markandeshwar(Deemed to be)University,Mullana,Ambala,133203,India

出　　处：《Computers, Materials & Continua》2025年第4期719-738,共20页计算机、材料和连续体(英文)

基　　金：funded by UKRI EPSRC Grant EP/W020408/1 Project SPRITE+2:The Security,Privacy,Identity and Trust Engagement Network plus(phase 2)for this study;The authors also have been funded by PhD project RS718 on Explainable AI through UKRI EPSRC Grant funded Doctoral Training Centre at Swansea University.

摘　　要：With cloud computing,large chunks of data can be handled at a small cost.However,there are some reservations regarding the security and privacy of cloud data stored.For solving these issues and enhancing cloud computing security,this research provides a Three-Layered Security Access model(TLSA)aligned to an intrusion detection mechanism,access control mechanism,and data encryption system.The TLSA underlines the need for the protection of sensitive data.This proposed approach starts with Layer 1 data encryption using the Advanced Encryption Standard(AES).For data transfer and storage,this encryption guarantees the data’s authenticity and secrecy.Surprisingly,the solution employs the AES encryption algorithm to secure essential data before storing them in the Cloud to minimize unauthorized access.Role-based access control(RBAC)implements the second strategic level,which ensures specific personnel access certain data and resources.In RBAC,each user is allowed a specific role and Permission.This implies that permitted users can access some data stored in the Cloud.This layer assists in filtering granular access to data,reducing the risk that undesired data will be discovered during the process.Layer 3 deals with intrusion detection systems(IDS),which detect and quickly deal with malicious actions and intrusion attempts.The proposed TLSA security model of e-commerce includes conventional levels of security,such as encryption and access control,and encloses an insight intrusion detection system.This method offers integrated solutions for most typical security issues of cloud computing,including data secrecy,method of access,and threats.An extensive performance test was carried out to confirm the efficiency of the proposed three-tier security method.Comparisons have been made with state-of-art techniques,including DES,RSA,and DUAL-RSA,keeping into account Accuracy,QILV,F-Measure,Sensitivity,MSE,PSNR,SSIM,and computation time,encryption time,and decryption time.The proposed TLSA method provides an accuracy of 89.23%,F-

关 键 词：Cloud security:data encryption AES access control intrusion detection systems(IDS) role-based access control(RBAC) 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]