## 3 Proposed Framework for Cloud Multi-Factor Multi-Layer Authentication
### Cloud MFA Algorithm for Intrusion Detection
\(length\
eq Matched\)THEN
7 Store \(UFP_{i}\) in \(Audit\_Table\)
8 Apply \(AUTH_{2}\) Layer
9 IF\(AUTH_{2}=Valid\)THEN
10 Generate\(New\)\(UFP_{j}\)
11 Store \(UFP_{i}\) into Cloud DB Server
12 Send \(UFP_{j}\) to \(User_{x}\)
13 ELSE
14 Add \(UFP_{i}\) to \(Suspected\_Table\)
15 Raise Alarm
16 ENDIF
17 ELSE
18 Check \(UFP_{i}\) validity
19 IF\(UFP_{i}\_valid=false\)THEN
20 Store \(UFP_{i}\) in \(Audit\_Table\)
21 Apply \(AUTH_{2}\) Layer
22 IF\(AUTH_{2}=Valid\)THEN
23 Generate \(New\)\(UFP_{j}\)
24 Store \(UFP_{j}\) into Cloud DB Server
25 Send \(UFP_{j}\) to \(User_{x}\)
26 ELSE
27 Add \(UFP_{i}\) to \(Suspected\_Table\)
28 Raise Alarm
29 ENDIF
30 ELSE//\(UFP_{i}\_valid=true\)
31 Check \(UFP_{i}\) for Auth Parameters
32 ENDIF
33 IF\(UFP_{i}\_value=false\)THEN
34 Store \(UFP_{i}\) in \(Audit\_Table\)
35 Apply \(AUTH_{2}\) Layer
36 IF\(AUTH_{2}=Valid\)THEN
37 Generate \(New\)\(UFP_{j}\)
38 Store \(UFP_{j}\) into Cloud DB Server
39 Send \(UFP_{j}\) to \(User_{x}\)
40 ELSE
41 Add \(UFP_{i}\) to \(Suspected\_Table\)
42 Raise Alarm
43 ENDIF
44 ELSE//\(UFP_{i}\_value=true\)
45 Check \(Suspected\_Table\)
46 ENDIF

## 4 Threat Model

Cloud computing environments are often attractive targets for attackers because they offer potential victims and a wide range of sensitive data. In addition, cloud-computing infrastructures can be complex and difficult to secure, which can make them more vulnerable to attack. Different factors can be defined for explaining failures in multi-factor authentication (MFA). One of these factors is the incomplete definition of an adversary, in which the capabilities and goals of an attacker and difficulties in defining cryptographic primitives must be defined. In addition, the provided MFA frameworks may be complex or unable to identify vulnerabilities. These factors are checked with eight proof failures to examine vulnerabilities [90]. Another methodology for securing authentication in critical applications is provided in [91], wherein a two-factor authentication is provided to overcome quantum attacks. The method is based on generating a smart card with a password authentication scheme for preventing key exchange. The following are a set of security issues that the attacker can perform to compromise the data from the cloud platform. * Data loss: The framework stores user credentials and authentication parameters in an encrypted format, but there is always a risk that these data could be compromised. If an attacker were to gain access to these data, they could use them to impersonate users and gain unauthorized access to cloud resources. * Account hijacking: The framework uses a variety of methods to detect suspicious user activity. Once an attacker has hijacked an account, they could use it to access sensitive data or to make unauthorized changes to cloud resources. * Data leakage: The framework uses a variety of methods to protect user data, but there is always a risk that data could be leaked. For example, an attacker could exploit a vulnerability in the framework to steal data, or could gain access to data by compromising a cloud service provider. * Brute force attack: in this attack, the attacker tries different possible keys until he obtains an intelligible secret key. * Monitoring for suspicious activity: when suspicious activity is detected, it is important to verify the activity and perform a suitable action to prevent the suspicious user from attacking the cloud services. To mitigate these threats, the proposed MFA layer framework and the algorithm of user behavior authentication implement the following security measures:

* Using strong authentication: the provided MFA authentication is based on defense-in-depth multi-layers, which authenticate, verify, secure, and maintain the privacy of cloud users who are connected to the cloud platform services. * Encrypting data: we use strong encryption to protect user credentials and authentication parameters. * We implement robust security controls to detect and prevent unauthorized access to user data.