Abstract

h i g h l i g h t s • Identify a new kind of attack on secure cloud auditing protocols. • Show two identity privacy-preserving auditing mechanisms called Oruta and Knox are insecure against this new attack. • Discuss the security of a distributed storage integrity auditing mechanism in our attack. a r t i c l e i n f o a b s t r a c t Cloud computing is a novel computing model that enables convenient and on-demand access to a shared pool of configurable computing resources. Auditing services are highly essential to make sure that the data is correctly hosted in the cloud. In this paper, we investigate the active adversary attacks in three auditing mechanisms for shared data in the cloud, including two identity privacy-preserving auditing mechanisms called Oruta and Knox, and a distributed storage integrity auditing mechanism. We show that these schemes become insecure when active adversaries are involved in the cloud storage. Specifically, an active adversary can arbitrarily alter the cloud data without being detected by the auditor in the verification phase. We also propose a solution to remedy the weakness without sacrificing any desirable features of these mechanisms.