## 3 Proposed Framework for Cloud Multi-Factor Multi-Layer Authentication
### Cloud MFA Algorithm for Intrusion Detection
* We train users with recommended security practices, such as using secure passwords and staying away from fraudulent websites. ## 5 Security Analysis for the Proposed MFA Model

Security analysis plays a critical role in cloud computing by helping organizations to identify, assess, and mitigate security risks. A security analysis of major attacks on cloud infrastructure is defined based on a set of steps. These steps are listed below. ### Identify Assets and Vulnerabilities

The first step in cloud security analysis is to identify all of the assets in the cloud environment, such as servers, storage, and databases. Once the assets have been identified, the next step is to identify any vulnerabilities that exist in those assets. The major assets and vulnerabilities of the cloud platform can be defined as follows. Assets:

Cloud applications;

Cloud data;

Provided cloud services;

Cloud main resources. Vulnerabilities:

Unauthorized access;

Data breaches;

Brute force attacks. ### Assess Threats

The next step is to assess the threats to the cloud environment. This includes identifying the potential attackers, their motivations, and their capabilities. The threat assessment should also consider the likelihood of each threat occurring. The major threats and vulnerabilities during the authentication of users on cloud are as follows. Weak passwords: Passwords are common forms of authentication, but they are also one of the weakest. Attackers can use different techniques, such as brute-force attacks and password cracking tools, to guess or steal passwords. Phishing attacks, which aim to deceive users into disclosing private data like passwords and credit card details. Attackers frequently send emails that look like they are coming from reputable businesses or organizations. Malware attacks: Malware is harmful software that can be secretly placed on a user's device. Malware can be used to steal passwords, intercept communications, and launch other attacks. ### Analyze Risks

Once the assets, vulnerabilities, and threats have been identified, the next step is to analyze the risks to the cloud environment. In each cloud environment, potential risks can be analyzed based on the following issues. * Complexity: the proposed cloud framework should be easy to implement and manage. * Security risks: the framework should introduce and identify major security risks and identify a proposed intrusion detection method for preventing these risks. * Privacy risks: the framework must preserve the privacy and sensitivity of users in factors such as location and web browser information. * Time: the execution time for detecting any malicious attacks depends on the complexity of authentication methods, number of authentication factors, number of manipulating users on the cloud, and the performance of the hardware/software used to implement the framework. ### Develop MFA

The final step is to develop an enhanced framework for mitigating the risks to the cloud environment. The proposed framework in this paper should mitigate the analyzed risks based on the following parameters:

* Complexity: Although the proposed framework contains multi-factor with multi-layer authentication parameters, the framework and its proposed algorithm provide efficient integration of three main layers with an additional embedded layer for encrypting and decrypting user parameters and authorizations. The first layer is responsible for selecting authentication methods for users based on different priority parameters. The second layer is responsible for detecting user behavior on the cloud system or platform using different multi-factor authentication parameters. The third layer proposes an algorithm for manipulating the behavior of users based on the defined cloud multi-factor authentication methods. The three layers are connected to an additional layer for encrypting user credentials and authentication parameters to prevent any probable disclosure of user information and cloud computing-sensitive data.