Security Framework to Ensure the Confidentiality of Outsourced Data in Public Cloud Storage

Cloud makes data storage very smart. It provides enormous amount of space to store the user’s data. These data are instantly available for the users at any time and it reduces the cost with respect to hardware support, technical experts available and license of the database. It leverages the small and medium scale enterprise straight away to start their business. Nevertheless cloud has many advantages; enterprises are undecided to deploy their data in the cloud storage, because data security issue is the top concern in Cloud Storage (CS). Security issues arose from the attack of cloud data by the hackers. Hackers are either outsiders from the enterprises or insiders from cloud service providers. This paper considers the issue that the CS is attacked by insiders from the cloud service provider. To protect this attack, this paper proposes the data confidentiality framework called AROMO. As per the proposed framework, user’s data are protected in the Cloud Storage. The proposed framework has a mechanism which uses two techniques to protect the data that are encryption and obfuscation. The data are encrypted and obfuscated before it is uploaded to CS. A metadata is maintained in the client. It contains the details of encryption and obfuscation applied on the data. To retrieve data from the CS, query is generated to run on encrypted and obfuscated data on the server side. Based on the query from the client, required data is fetched out from the CS; it could be decrypted and deobfuscated in client side based on the metadata details.