Multilevel cloud security policy (MCSP) for cloud-based environments

Abstract

In the present period Cloud computing(CC) generally addresses the issues of quick arrangement and on-request versatility. Despite the fact that Cloud computing gives countless benefits to the clients like adaptability, versatility and so on however, it additionally brings new security challenges. In this paper, authors have proposed a Multilevel Cloud Security Policy (MCSP) to provide security in Cloud-based environment from the malicious insider attacks. This policy comprises of two levels viz. Cloud Chinese Wall Security Policy (CCWSP), and Cloud Clark Wilson Policy (CCWP). At the outer level of MCSP, CCWSP operates, whileat the inner level operates CCWP. Whenever a client endeavors to access services provided by the Cloudor administrations then its demand is either allowed or dismissed by the CCWSP. Now, if the client gains admittance to the asked for administration or services, then within that service or domain the authorization is done using the CCWP. The MCSP is proposed to mitigate the malicious insider attacks at IaaS in Cloud-based environments. Being a multi-level policy it is capable to detect as well as prevent the malicious insiders within the tenants of the clouds as well as within the organizations.