An Insider Threat Identification And Access Control In Cloud Environment

Abstract

Cloud computing is a game changer in the field of data storage service, computer application service, Data provisioning service and many more. More and more organizations are moving towards cloud for different types of services requirement. Cloud computing is an Internet-based computer technology that   refers to the use of Computing resources i.e. hardware and software, available on demand as pay and use service over the Internet. Data on the cloud server is the real concern for client as he loses control over the data. Here we highlight the client security concern with respect to data. Overall Cloud functionality has been divided into four layers. Each layer is responsible to carry out specific activity. At each layer data will be handled by different person and at different location. At each layer we propose a four layered security for data. The first layer is cloud user layer, in that a robust and dynamic method has been proposed and implemented for access control. Access control at user layer (client side) to mitigate internal threat is implemented using mathematical model and decision tree.