Building a Reputation Attack Detector for Effective Trust Evaluation in a Cloud Services Environment
Source abstract
Abstract
Cloud computing is a widely used technology that has changed the way people and organizations store and access information. This technology is versatile, and extensive amounts of data can be stored in the cloud. Businesses can access various services over the cloud without having to install applications. However, cloud computing services are provided over a public domain, which means that both trusted and non-trusted users can access the services. Although there are a number of advantages to cloud computing services, especially for business owners, various challenges are posed in terms of the privacy and security of information and online services. A threat that is widely faced in the cloud environment is the on/off attack, in which entities exhibit proper behavior for a given time period to develop a positive reputation and gather trust, after which they exhibit deception. Another threat often faced by trust management services is a collusion attack, which is also known as collusive malicious feedback behavior. This is carried out when a group of people work together to make false recommendations with the intention of damaging the reputation of another party, which is referred to as a slandering attack, or to enhance their own reputation, which is referred to as a self-promoting attack. In this paper, a viable solution is provided with the given trust model for preventing these attacks. This method works by providing effective security to cloud services by identifying malicious and inappropriate behaviors through the application of trust algorithms that can identify on/off attacks and collusion attacks by applying different security criteria. Finally, the results show that the proposed trust model system can provide high security by decreasing security risk and improving the quality of decisions of data owners and cloud operators.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cloud Data Security Solutions · Blockchain Technology Applications and Security · Security and Verification in Computing
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Computer Science, College of Computing and Information Technology, King Abdulaziz University, Jeddah 21589, Saudi Arabia
Funding
King Abdulaziz University
References (36)
Show source-provided references
1. Noor, T.H., Sheng, M., and Alfazi, A. (2013, January 16–18). Reputation Attacks Detection for Effective Trust Assessment among Cloud Services. Proceedings of the 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, Melbourne, Australia.10.1109/TrustCom.2013.59 ↗
2. Chang, E. (August, January 29). General Attacks and Approaches in Cloud-Scale Networks. Proceedings of the IEEE International Conference on Computer Communications, Valencia, Spain.
3. Trust Management in E-commerce Websites
4. CloudArmor: Supporting Reputation-Based Trust Management for Cloud Services10.1109/TPDS.2015.2408613 ↗
5. Varalakshmi, P., Judgi, T., and Balaji, D. (2018). Trust Management Model Based on Malicious Filtered Feedback in Cloud. Data Science Analytics and Applications, Springer.10.1007/978-981-10-8603-8_15 ↗
6. Adaptive and attribute-based trust model for service-level agreement guarantee in cloud computing10.1049/iet-ifs.2012.0232 ↗
7. Huang, L., Xiong, Z., and Wang, G. (2016, January 27–29). A Trust-role Access Control Model Facing Cloud Computing. Proceedings of the 35th Chinese Control Conference, Chengdu, China.10.1109/ChiCC.2016.7554170 ↗
8. MTBAC: A mutual trust based access control model in Cloud computing10.1109/CC.2014.6827577 ↗
9. An Authenticated Trust and Reputation Calculation and Management System for Cloud and Sensor Networks Integration
10. Chen, X., Ding, J., and Lu, Z. (2020). A decentralized trust management system for intelligent transportation environments. IEEE Trans. Intell. Transp. Syst., 1–14.
11. A Domain Partition-Based Trust Model for Unreliable Clouds10.1109/TIFS.2018.2812166 ↗
12. Tan, Z., Tang, Z., Li, R., Sallam, A., and Yang, L. (2014, January 12–14). Research of Workflow Access Control Strategy based on Trust. Proceedings of the 11th Web Information System and Application Conference, Tianjin, China.10.1109/WISA.2014.24 ↗
13. T-Broker: A Trust-Aware Service Brokering Scheme for Multiple Cloud Collaborative Services10.1109/TIFS.2015.2413386 ↗
14. A Survey on Authentication and Access Control for Cloud Computing using RBDAC Mechanism
15. Service Operator-Aware Trust Scheme for Resource Matchmaking across Multiple Clouds10.1109/TPDS.2014.2321750 ↗
16. An Adaptation of Context and Trust Aware Workflow Oriented Access Control for Remote Healthcare10.1142/S0218194018500225 ↗
17. Noor, T.H., Sheng, Q.Z., and Alfazi, A. (2013). Detecting Occasional Reputation Attacks on Cloud Services. Web Engineering, Springer.10.1007/978-3-642-39200-9_35 ↗
18. Labraoui, N., Gueroui, M., and Sekhri, L. (2015, January 20–21). On-Off Attacks Mitigation against Trust Systems in Wireless Sensor Networks. Proceedings of the 5th International Conference on Computer Science and Its Applications (CIIA), Saida, Algeria.10.1007/978-3-319-19578-0_33 ↗
19. Noor, T.H., Sheng, Q.Z., and Bouguettaya, A. (2014). Trust Management in Cloud Services, Springer.10.1007/978-3-319-12250-2 ↗
20. Intrusion detection scheme based node trust value in WSNs
21. A Thorough Trust and Reputation Based RBAC Model for Secure Data Storage in the Cloud10.1109/TPDS.2018.2870652 ↗
22. Reputation based approach for improved fairness and robustness in P2P protocols10.1007/s12083-018-0701-x ↗
23. Deng, W., and Zhou, Z. (2012, January 6–8). A Flexible RBAC Model Based on Trust in Open System. Proceedings of the 2012 Third Global Congress on Intelligent Systems, Wuhan, China.10.1109/GCIS.2012.79 ↗
24. A reliable trust computing mechanism based on multisource feedback and fog computing in social sensor cloud10.1109/JIOT.2020.2981005 ↗
25. Zhou, L., Varadharajan, V., and Hitchens, M. (2013, January 16–18). Integrating Trust with Cryptographic Role-Based Access Control for Secure Cloud Data Storage. Proceedings of the 2013 12th IEEE International Conference on Trust, Security and Privacy in Computing and Communications, Melbourne, Australia.10.1109/TrustCom.2013.69 ↗
26. Chang, W., Xu, F., and Dou, J. (2012, January 7–9). A Trust and Unauthorized Operation Based RBAC (TUORBAC) Model. Proceedings of the International Conference on Control Engineering and Communication Technology, Shenyang, China.10.1109/ICCECT.2012.217 ↗
27. A Trust Evaluation Model for Cloud Computing Using Service Level Agreement10.1093/comjnl/bxu129 ↗
28. Tsai, W.T., Zhong, P., Bai, X., and Elston, J. (2009, January 14–15). Role-Based Trust Model for Community of Interest. Proceedings of the 2009 IEEE International Conference on Service-Oriented Computing and Applications (SOCA), Taipei, Taiwan.10.1109/SOCA.2009.5410472 ↗
29. Fan, Y., and Zhang, Y. (2015, January 13–15). Trusted Access Control Model Based on Role and Task in Cloud Computing. Proceedings of the 7th International Conference on Information Technology in Medicine and Education, Huangshan, China.
30. Bhatt, S., Sandhu, R., and Patwa, F. (2017, January 15–17). An Access Control Framework for Cloud-Enabled Wearable Internet of Things. Proceedings of the 3rd International Conference on Collaboration and Internet Computing (CIC), San Jose, CA, USA.10.1109/CIC.2017.00050 ↗
31. Alshammari, S., Telaihan, S., and Eassa, F. (2018, January 25–26). Designing a Flexible Architecture based on mobile agents for Executing Query in Cloud Databases. Proceedings of the 21st Saudi Computer Society National Computer Conference (NCC), Riyadh, Saudi Arabia.10.1109/NCG.2018.8593061 ↗
32. Alshammari, S., Albeshri, A., and Alsubhi, K. (2021). Integrating a High-Reliability Multicriteria Trust Evaluation Model with Task Role-Based Access Control for Cloud Services. Symmetry, 13.10.3390/sym13030492 ↗
33. Alshammari, S.T., Albeshri, A., and Alsubhi, K. (2021). Building a trust model system to avoid cloud services reputation attacks. Egypt. Inform. J.10.1016/j.eij.2021.04.001 ↗
34. Uikey, C., and Bhilare, D.S. (2017, January 17–19). TrustRBAC: Trust role based access control model in multi-domain cloud environments. Proceedings of the 2017 International Conference on Information, Communication, Instrumentation and Control (ICICIC), Indore, India.10.1109/ICOMICON.2017.8279087 ↗
35. Trust and Reputation in the Internet of Things: State-of-the-Art and Research Challenges10.1109/ACCESS.2020.2982318 ↗
36. Enabling Dynamic Data and Indirect Mutual Trust for Cloud Computing Storage Systems10.1109/TPDS.2012.337 ↗