Landmark-based data location verification in the cloud : review of approaches and challenges

Malik Irain (1) , Jacques Jorda (1) , Zoubir Mammeri (1)

1 IRIT-T2RS - Temps Réel dans les Réseaux et Systèmes

Data storage on the cloud is growing every day and many companies, administrations, and individuals are now outsourcing storage of their data to large-scale Cloud Service Providers (CSP). However, because of today’s cloud infrastructure virtualization, data owners cannot easily know the location where their data are stored. Even in case of the establishment of a strong Service-Level Agreement, which includes an initial guarantee regarding data location, the CSP may then move data to another location, like another country, in order to cut storage costs or for any other reasons, including backup mistakes and fraudulent use of data. Data location verification is required due to legal, privacy, and performance constraints. Recently “Where are my data located in the cloud?” has become a challenge and solutions have been proposed to verify data location, under given assumptions regarding CSP behavior. The objective of this paper is twofold: propose a comprehensive classification of the location verification approaches and discuss their vulnerabilities regarding malicious CSP attacks. Location verification solutions may be Framework-based, Hardware-based or Landmark-based. This paper addresses only landmark-based approaches for their deployment flexibility and low cost.

Mots clés: Landmark-based approaches; Cloud storage; Cloud computing; Data location verification; Security attacks

Domaines: Réseaux et télécommunications [cs.NI]; Système d'exploitation [cs.OS]; Architectures Matérielles [cs.AR]; Systèmes embarqués

Malik Irain, Jacques Jorda, Zoubir Mammeri. Landmark-based data location verification in the cloud : review of approaches and challenges. Journal of Cloud Computing: Advances, Systems and Applications, 2017, 6 (31), pp.1-20. ⟨10.1186/s13677-017-0095-y⟩. ⟨hal-02640389⟩