The Security Enhancement for Privacy-Aware Access Control System on Private Cloud (PAAC)

Abstract

Cloud is a relatively new concept and so it is unsurprising that the information assurance, data protection, network security and privacy concerns have yet to be fully addressed. Companies such as RedHat, Microsoft, Amazon, Google, and IBM are increasingly funding cloud computing infrastructure and research, making it important for students to gain the necessary skills to work with cloud-based resources. This paper presents a free, educational private cloud using an existing infrastructure. However, security is a huge issue for cloud users especially access control, user profile management and accessing services offered by the private cloud environment. Therefore, this paper proposes a private cloud control, privacy and access for the cloud user who are involved in the academic institution private cloud system. This system intends to reduce the risk such as stealing and misuse of the private personal data. This system uses Eucalyptus Cloud Infrastructure as a testbed. The main ideas of this system (in term of security and privacy) are to minimize the confidential information of cloud users, to maximize the access control and to specify the data usage.