Integrity and confidentiality preservation in cloud

Challenges in cloud forensics have been increasing due to increase in cloud computing. Many types of attacks are used to bring down different types of cloud service models by malicious users. In this paper, we provide a scheme which main-tains the integrity and confidentiality of logs as well as provides easy verification mechanism for the logs. Various encryption techniques and hash functions are used to provide integrity to the generated logs in the system. We use RESTful API to publish our logs on the web for verification in the system and also by the auditor. To avoid non-repudiation, we use digital signature generation. Our scheme ensures that even the cloud provider cannot collude with the attacker. Unlike the techniques introduced so far for storing and verifying logs, we introduce bloom sequence which ensures a low false positive rate.