No Cover Image

Journal article 107 views 8 downloads

Enhanced Triple Layered Approach for Mitigating Security Risks in Cloud

Tajinder Kumar, Purushottam Sharma, Cheng Cheng Orcid Logo, Sachin Lalar, Shubham Kumar, Sandhya Bansal

Computers, Materials & Continua, Volume: 83, Issue: 1, Pages: 719 - 738

Swansea University Author: Cheng Cheng Orcid Logo

  • 68957.VOR.pdf

    PDF | Version of Record

    © 2025 The Authors. This work is licensed under a Creative Commons Attribution 4.0 International License (CC BY).

    Download (941.16KB)

Abstract

With cloud computing, large chunks of data can be handled at a small cost. However, there are some reservations regarding the security and privacy of cloud data stored. For solving these issues and enhancing cloud computing security, this research provides a Three-Layered Security Access model (TLSA...

Full description

Published in: Computers, Materials & Continua
ISSN: 1546-2218 1546-2226
Published: Tech Science Press 2025
Online Access: Check full text

URI: https://cronfa.swan.ac.uk/Record/cronfa68957
Abstract: With cloud computing, large chunks of data can be handled at a small cost. However, there are some reservations regarding the security and privacy of cloud data stored. For solving these issues and enhancing cloud computing security, this research provides a Three-Layered Security Access model (TLSA) aligned to an intrusion detection mechanism, access control mechanism, and data encryption system. The TLSA underlines the need for the protection of sensitive data. This proposed approach starts with Layer 1 data encryption using the Advanced Encryption Standard (AES). For data transfer and storage, this encryption guarantees the data’s authenticity and secrecy. Surprisingly, the solution employs the AES encryption algorithm to secure essential data before storing them in the Cloud to minimize unauthorized access. Role-based access control (RBAC) implements the second strategic level, which ensures specific personnel access certain data and resources. In RBAC, each user is allowed a specific role and Permission. This implies that permitted users can access some data stored in the Cloud. This layer assists in filtering granular access to data, reducing the risk that undesired data will be discovered during the process. Layer 3 deals with intrusion detection systems (IDS), which detect and quickly deal with malicious actions and intrusion attempts. The proposed TLSA security model of e-commerce includes conventional levels of security, such as encryption and access control, and encloses an insight intrusion detection system. This method offers integrated solutions for most typical security issues of cloud computing, including data secrecy, method of access, and threats. An extensive performance test was carried out to confirm the efficiency of the proposed three-tier security method. Comparisons have been made with state-of-art techniques, including DES, RSA, and DUAL-RSA, keeping into account Accuracy, QILV, F-Measure, Sensitivity, MSE, PSNR, SSIM, and computation time, encryption time, and decryption time. The proposed TLSA method provides an accuracy of 89.23%, F-Measure of 0.876, and SSIM of 0.8564 at a computation time of 5.7 s. A comparison with existing methods shows the better performance of the proposed method, thus confirming the enhanced ability to address security issues in cloud computing.
Keywords: Cloud security: data encryption; AES; access control; intrusion detection systems (IDS); role-based access control (RBAC)
College: Faculty of Science and Engineering
Funders: This work was supported by UKRI EPSRC Grant funded Doctoral Training Centre at Swansea University, through PhD project RS718 on Explainable AI. Authors also have been supported by UKRI EPSRC Grant EP/W020408/1 Project SPRITE+ 2: The Security, Privacy, Identity and Trust Engagement Network plus (phase 2).
Issue: 1
Start Page: 719
End Page: 738