A secure storage method for massive network cloud data based on CP-ABE algorithm

HYBRID CLOUD ARCHITECTURE FOR SECURE DATA STORAGE AND HIGH-AVAILABILITY ACCESS IN SAUDI ENTERPRISES

Saudi enterprises are modernizing critical information systems while facing strict expectations for data protection, continuous availability and accountable cloud governance. Hybrid cloud architecture has become a pragmatic design pattern because it allows sensitive databases, regulated records and latency-sensitive services to remain under direct enterprise control while elastic public-cloud services support analytics, disaster recovery, software delivery and burst capacity. This review paper synthesises recent work from 2020 to 2025 on hybrid cloud security, private cloud platforms, high-availability storage, cloud threat management and Saudi regulatory alignment. The paper develops an integrated review framework and proposes a reference architecture that combines data classification, encrypted storage, zero-trust access, distributed storage, active-active service routing, immutable backup and continuous observability. The findings indicate that Saudi enterprises should treat hybrid cloud as a governed operating model rather than a simple mixture of local and public infrastructure. Secure storage depends on policy-driven data placement, key sovereignty, identity federation, segmentation and auditable transfer controls. High availability depends on removing single points of failure across proxy, control, data, compute, network and storage layers, with routine failover testing and business-aligned recovery objectives. The review contributes a structured control matrix and implementation roadmap for Saudi enterprises that need scalable digital platforms without weakening confidentiality, integrity or service continuity.

Enhanced Secure Storage Architecture for IAAS Cloud Environments

The growing adoption of Cloud Computing has profoundly transformed the management of IT infrastructures by providing flexible, scalable, and on-demand accessible resources. Among the various cloud computing service models, Infrastructure as a Service (IaaS) enables organizations to outsource their computing, networking, and storage resources to cloud providers. However, this outsourcing raises significant security concerns, particularly regarding the confidentiality, integrity, and availability of stored data. This paper presents an analytical study of storage security techniques in IaaS environments and examines the main threats that may affect data hosted in the cloud, including unauthorized access, misconfigurations, insider threats, and cyber attacks. Particular attention is given to cryptographic mechanisms used to protect data, including symmetric, asymmetric, and hybrid encryption techniques, as well as client-side and server-side encryption approaches. Based on this analysis, an enhanced secure storage architecture is proposed. This architecture relies on three main techniques: client-side data encryption using AES-256, encryption key protection through RSA, and the use of a Key Management System (KMS). It also incorporates secure communication protocols and enhanced authentication mechanisms. The objective is to ensure effective data protection while preserving the advantages provided by cloud infrastructures. The results of this study highlight the importance of combining robust encryption techniques, secure key management, and appropriate access control mechanisms to strengthen trust in cloud storage solutions. Finally, emerging approaches such as homomorphic encryption and Zero Trust architectures are presented as promising directions for future developments in cloud security.

DynSecCloud: A Novel Framework for Enhancing Cloud Storage Security with Dynamic Fragmentation

: The growing use of cloud storage for sensitive information necessitates improved data protection without compromising performance. They are not compatible with traditional AES or RSA encryption models, but rather create a new model, DynSecCloud, which combines a dynamic RNG-based fragmentation and location-based chain encryption to deliver data confidentiality, integrity, and effectiveness. The suggested model splits files into randomly sized portions, encrypts them with keys derived through chains depending on the place of storage, and checks their integrity by using the hash-SHA-256. This is a multi-dimensional security design that makes it more unpredictable and resistant to tampering and unauthorized access. It has been experimentally confirmed that DynSecCloud can be used to reduce storage overheads by up to 30 percent and enhance attack resistance by a factor of 40 over conventional techniques and is a scalable and efficient solution to cloud data protection.

SDAP-K: A Kerberos-Assisted Secure Data Auditing Protocol for Cloud Storage

Cloud storage services have become a fundamental component of modern computing infrastructures, enabling scalable and cost-effective data management. However, outsourcing data to remote cloud servers introduces significant security challenges, particularly in ensuring data integrity, secure access control, and efficient auditing of stored information. Existing cloud auditing schemes primarily focus on integrity verification and often rely on trusted third-party auditors, leading to additional trust assumptions, communication overhead, and metadata management complexity. To address these limitations, this research presents a Kerberos-Assisted Secure Data Auditing Protocol (SDAP-K) that integrates authenticated service exchange with lightweight integrity verification for outsourced cloud storage. The proposed framework employs Kerberos-based mutual authentication and ticket-driven access control to establish secure communication among the Data Owner, Authentication Server, Metadata Server, and Cloud Data Server. To verify storage correctness, an N-ary hash tree with the Modified Murmur hash algorithm is used to enable efficient file- and block-level auditing without requiring a trusted third-party auditor. The framework further incorporates metadata-assisted auditing, dynamic data operations, and an error localization and recovery mechanism that identifies and restores corrupted data blocks. Security analysis demonstrates that the proposed protocol mitigates unauthorized access, replay attacks, impersonation attempts, and malicious data modification. Experimental results indicate that SDAP-K reduces storage execution time by 18.6%, retrieval time by 24.3%, update time by 21.8%, file-level auditing overhead by 31.5%, and block-level auditing latency by 36.2% compared with state-of-the-art research, while eliminating the need for a trusted third-party auditor. The results indicate that the proposed framework offers a practical, lightweight, and reliable solution for secure cloud data auditing in enterprise cloud storage environments.

Security concern based Damgard-Jurik algorithm for data transmission in decentralized cloud storage

Decentralized cloud storage (DCS) provides IT resources to a growing community of users. Decentralized storage systems offer availability, redundancy, and security because the data will be spread across numerous nodes. Despite its benefits, there are still challenges associated with DCS, such as inconsistency in data versions, complicated data retrieval, and the problem of data integrity and privacy. To effectively handle these challenges, it is necessary to come up with new solutions. To overcome these issues, a novel Dual-Chunk redundancy assisted Damgard-Jurik-incorporated slice-based data security (DRAGO-SLICE) framework has been suggested in this paper to improve security and reliability in DCS. The suggested approach utilizes the Damgard-Jurik algorithm (DJA) for encrypting the cloud resource data. The slicing process divides encrypted data into multiple chunks to increase security. Enhanced system reliability has been achieved by implementing dual chunk redundancy (DCR). Python has been used to simulate the suggested model. The efficacy of the developed approach is evaluated utilizing metrics namely decryption time (DT), security strength, encryption time (ET), latency, computational overhead, reliability, storage efficiency, and throughput. The proposed DRAGO-SLICE strategy performs better in terms of security than the existing methods, including Ethereum virtual machine elliptic-curve cryptography (EVM-ECC), decentralized blockchain-based security (DeBlock-Sec), and blockchain-based decentralized storage system (BC-DSS) approaches, by 21.05%, 13.74%, and 8.52%, respectively.

Verifiable multi-keyword searchable encryption with fine-grained access control for cloud data security