@proceedings {538, title = {An Approach to Enhancing Confidentiality and Integrity on Mobile Multi-Cloud Systems: The {\textquotedblleft}ARIANNA{\textquotedblright} Experience}, journal = {The Fourth IEEE International Workshop on Mobile Cloud Computing systems, Management, and Security (MCSMS-2018)}, year = {2018}, month = {10/2018}, address = {Valencia, Spain}, abstract = {

Technology evolution is addressing the industry to face some formidable challenges, such as ensuring the security of mobile devices.

By the union between Cloud technologies and mobile devices, the new concept of {\textquoteleft}{\textquoteleft}Mobile Cloud Computing\ (MCC)"\ has emerged.

MCC technologies enable users to quickly collect and integrate data from heterogeneous sources, regardless of where they reside.

However, although they are constantly evolving and spreading, these technologies still maintain security and privacy issues that have not found definitely answers.

In this paper we propose a mobile secure storage approach which is primarily oriented to guarantee confidentiality\ and integrity\ issues concerning data stored on mobile smart devices that are part of a multi-Cloud environment.\newline

To this end, we introduce and discuss the {\textquoteleft}{\textquoteleft}ARIANNA"\ app.

ARIANNA consists of an Android app that represents the software enabler\ which allows us to extend our sperimental multi-Cloud system towards the mobile world.

Moreover, in order to evaluate our proposal, we conducted several experiments taking into consideration the mobile application in real and dynamic multi-Cloud environment scenarios.

}, keywords = {AES-256, Android, Cloud storage, Confidentiality, Data Privacy, Data Security, Integrity, mobile Cloud storage, mobile device, mobile multi-Cloud, multi-Cloud, OpenStack., RSA}, author = {Riccardo Di Pietro and Marco Scarpa and Maurizio Giacobbe and Antonio Puliafito} } @proceedings {532, title = {ARIANNA: A Mobile Secure Storage Approach in Multi-Cloud Environment}, journal = {WiP Session - 4th IEEE International Conference on Smart Computing (SMARTCOMP 2018) }, year = {2018}, publisher = {IEEE - IEEE Computer Society}, address = {Taormina, Sicily, Italy}, abstract = {

Technology is profoundly changing the way we live. If on one hand Cloud computing has transformed today{\textquoteright}s com- puting landscape, on the other hand the spread of mobile devices is changing our everyday life. Because the Cloud infrastructures perform intensive computing tasks and offers unlimited data storage, people and companies started benefit from engaging mobile apps that would not otherwise be possible. For these reasons, in order to maintain the competitive advantage, compa- nies are now deciding to adopt mobile multi-Cloud strategies for their products and services. In this work we propose a mobile secure storage approach primarily oriented to guarantee confidentiality and integrity issues concerning data stored on smart devices which are part of a multi-Cloud environment. In this paper we presented and discussed our Android app, we called {\textquotedblleft}ARIANNA{\textquotedblright}. It enables and integrates our experimental multi-Cloud framework, which description is present in literature. Moreover, in order to evaluate our proposal, we conducted several experiments by considering the mobile application in a real multi-Cloud environment scenario.

}, keywords = {AES-256, Android, Cloud storage, Confidentiality, Data Privacy, Data Security, Integrity, mobile Cloud storage, mobile device, mobile multi-Cloud, multi-Cloud, OpenStack, RSA}, author = {Riccardo Di Pietro and Marco Scarpa and Maurizio Giacobbe and Flavia Oriti} } @booklet {259, title = {GS3: a Grid Storage System with Security Features}, journal = {JOURNAL OF GRID COMPUTING}, volume = {8}, year = {2010}, pages = {391{\textendash}418}, abstract = {Technological trend and the advent of worldwide networks, such as the Internet, made computing systems more and more powerful, increasing both processing and storage capabilities. In Grid computing infrastructures, the data storage subsystem is physically distributed among several nodes and logically shared among several users. This highlights the necessity of a) availability for authorized users only, b) confidentiality, and c) integrity of information and data: in one term security. In this work we face the problem of data security in Grid, by proposing a lightweight cryptography algorithm combining the strong and highly secure asymmetric cryptography technique (RSA) with the symmetric cryptography (AES). The proposed algorithm, we named Grid secure storage system (GS(3)), has been implemented on top of the Grid file access library (GFAL) of the gLite middleware, in order to provide a file system service with cryptography capability and POSIX interface. The choice of implementing GS(3) as a file system, the GS3FS, allows to protect the file system structure also, and to overcome the well-known problem of file rewriting in gLite/GFAL environments. In the specification of the GS3FS, particular care is addressed on providing a usable user interface and on implementing a file system that has low impact on the middleware. The final result is the introduction of a new storage Grid service into the gLite middleware, whose overall characteristics are never offered before, at the best of authors{\textquoteright} knowledge. The paper describes and details both the GS(3) algorithm and its implementation; the performance of such implementation are evaluated discussing the obtained results and possible application scenarios in order to demonstrate its effectiveness and usefulness.}, keywords = {Confidentiality, File system, GFAL, gLite, Grid, Integrity}, doi = {10.1007/s10723-010-9157-9}, author = {V. D. Cunsolo and S. Distefano and A. Puliafito and Marco Scarpa} }