# Secure Framework Enhancing AES Algorithm in Cloud Computing

Authors: Ijaz Ahmad Awan; Muhammad Shiraz; Muhammad Usman Hashmi; Qaisar Shaheen; Rizwan Akhtar; Allah Ditta
Journal: Security and Communication Networks
 (2020)

---

## Abstract

The tremendous growth of computational clouds has attracted and enabled intensive computation on resource-constrained client devices. Predominantly, smart mobiles are enabled to deploy data and computational intensive applications by leveraging on the demand service model of remote data centres. However, outsourcing personal and confidential data to the remote data servers is challenging for the reason of new issues involved in data privacy and security. Therefore, the traditional advanced encryption standard (AES) algorithm needs to be enhanced in order to cope with the emerging security threats in the cloud environment. This research presents a framework with key features including enhanced security and owner’s data privacy. It modifies the 128 AES algorithm to increase the speed of the encryption process, 1000 blocks per second, by the double round key feature. However, traditionally, there is a single round key with 800 blocks per second. The proposed algorithm involves less power consumption, better load balancing, and enhanced trust and resource management on the network. The proposed framework includes deployment of AES with 16, 32, 64, and 128 plain text bytes. Simulation results are visualized in a way that depicts suitability of the algorithm while achieving particular quality attributes. Results show that the proposed framework minimizes energy consumption by 14.43%, network usage by 11.53%, and delay by 15.67%. Hence, the proposed framework enhances security, minimizes resource utilization, and reduces delay while deploying services of computational clouds.


---

## Body

## 1. Introduction

It is observed that cloud technology is used in a number of architectures, services with further technologies, and various software design approaches [1]. Cloud service models include platform as a service (PaaS), software as a service (SaaS), and infrastructure as a service (IaaS). Architecture solutions for the public, private, community, and hybrid system depend on four cloud platform deployment models [2]. Advantages of cloud computing include flexibility, accessibility, and capacity when linked to traditional online computing or storage method [3]. However, a number of security concerns are associated with computational clouds including (i) privacy and security issues with cloud service providers and (ii) customer-related security issues [4]. In the literature, various types of attacks related to the strength of the AES (advanced encryption standard) algorithm have been proposed [5], for instance, different fault analyses which attack and introduce faults into the AES (advanced encryption standard) structure with the target to retrieving the secret information [6].Furthermore, cloud computing standard can propose some feasible practices of service area, by means of computational resources on behalf of extraordinary performance in computing applications, telecommunication services, social networking, and web services [7, 8]. In addition, cloud storage in data centres is very valuable for users just before storing and accessing their data distantly at any time without any further load [9, 10]. On the contrary, the main problem of cloud data storage is security. As a result, cloud data centres must have some mechanisms which are capable to ensure storage perfection and integrity of data that are stored on cloud [11].Existing security systems employ one or two attributes at a time, i.e., low security and more time consumption to encrypt/decrypt the data. This makes the process more time-consuming and therefore increases the network use, power consumption, and delay in the network [12–16]. Cloud computing is that kind of platform which shares the data and resources efficiently, and therefore, security must be provided to the users as security is an important aspect of cloud computing. So, this is the responsibility of the cloud service providers to provide security with all attributes, such as less power consumption, delay of network, and time consumption [17–23]. Already, traditionally available methods are not able to quantify the security of cloud services effectively. Secure framework in cloud computing is a method that provides simplified management and accessing of computing resources, and a cost-effective approach is the need of the hour. The framework should use low power, time, and delay of network consumption with encryption and decryption that enhance the security of data in cloud computing.The paper contributes towards the design of the security framework by implementing a new scheme of encryption/decryption. It also determines the serious components of the security framework within the cloud computing community. It would be helpful for those cloud users and cloud service providers who have similar requirements in terms of security during implementation. The framework helps in faster computing with lesser power consumption, network usage, and reduced network delay due to the smart algorithm. The framework employs a symmetrical encryption method to provide trust to users and enables trusted gateways. The proposed framework includes the key features including enhanced security and owner’s data privacy. It modifies the 128 AES algorithm to increase the speed of the encryption process 1000 blocks per second by the double round key feature. However, traditionally, there is a single round key with 800 blocks per second. The proposed algorithm involves less power consumption, better load balancing, and enhanced trust and resource management on the network. The proposed framework includes deployment of AES with 16, 32, 64, and 128 plain text bytes. Simulation results are visualized in a way that depicts suitability of the algorithm while achieving particular quality attributes. Results show that the proposed framework minimizes energy consumption by 14.43%, network usage by 11.53%, and delay by 15.67%. Hence, the proposed framework enhances security, minimizes resource utilization, and reduces delay while deploying services of computational clouds.The remainder of this paper is configured as the following sections: Section2 details the literature review. Section 3 defines the framework architecture. Section 4 includes the experimental environment. Section 5 presents the performance results of both existing and proposed frameworks. Section 6 defines the forthcoming features associated with this paper exertion.


## 2. Literature Review

Several modifications were introduced in AES in order to enhance the performance speed and security by introducing some complexities in algorithms. These modifications are implemented on different software and hardware designs. However, preview framework security is always a concern due to some security constraints and problems with cloud computing. The security is provided to the information which is stored on the cloud by using cryptography algorithms. There are extensive security frameworks for cloud computing that uses enormous encryption techniques. Out of these, a few of them are presented here.The security framework is based on the multicloud environment to store digital data at all. In order to prevent data disclosure, they practiced a segmentation approach to fragment the input appearance into several areas. The integrity of the outsourced clients’ data helps to verify watermarking technique. Any accidental change to outsourced clients’ data can be detected by the digital signature and watermarking methods [24]. This paper focuses on the computation of different methods which explain how to increase data security so that prevention from different security attacks and breaches can be made. Mitigation approaches used in this research on the HMAC (Hashed Message Authentication Code) were ECC and MD5. This proposed solution is based on different security levels; as a result, access control, authentication, confidentiality, integrity, and encryption are achieved in this work. The authors performed and checked the security solution in real-time as well as in real cloud computing environment and also concluded that the solution that is been provided has very low overhead for upload and download service time [17]. The framework presented in this study is more secure, and it provides more privacy to the data. This framework splits data into different blocks of bit. On every two blocks of bits, genetic algorithm is applied. Concluding output of each genomic algorithm procedure is a ciphertext along with two blocks of bits. Each ciphertext is stored on the cloud at a distinct location, and the location of the ciphertext is not secure. What makes it more secure from attackers to find the exact location of the ciphertext? The innovative security framework puts on a genetic algorithm on minor block size that increases the security. Furthermore, the framework uses the proficiency list aiming to secure and to access data [18].In this paper, authors proposed a new framework that ensures the data security and integrity and also focused on the encryption and decryption approaches facilitating the cloud user with data security assurance. The proposed solution talked about the increased security along with the performance. Their solution has also included functioning of the forensic virtual machine, malware detection, and real-time monitoring of the system [25]. In this paper, the authors suggested a framework such that the objective is to store data in various clouds. The given framework is found based on 3DES and RSA encryption. On the contrary, this methodology is lacking in efficiency, privacy, and overload middleware through multiple functions [26]. In this paper, the authors studied, multilevel licensing framework approval preservation cloud penetrating data. Safeguarding the familiar and delicate cloud data is obtainable by the three covers’ framework. Those restrictions are being the security and privacy strategies, safety and approval policies which outcomes from the three films’ security framework [19]. In this paper, the authors proposed quality metrics and details probe on instance cloud service broker frameworks are provided. These streak metrics help in enforcing standards on cloud service providers by using quality-based cloud service broker framework (QCSB). The algorithm and implementation of QCSB have been obsessing. At last, the authors concluded that the proposed material QCSB not only assists cloud computing to locate optimal CSP (cloud service provider) for cloud services but also affiliates candidate CSPs according to user quality preferences [20].The complexity detects were an effect of dismiss logical purposes in the MixColumn conversion of AES. These reasonable tasks were eradicating in the modified version of AES. Afterward,on utilizing the modified AES, a 13.6% reduction in LUTs, 10.93% share discount, and a 1.19% reduction in interruption eating was attained. Likewise, the small dispersal rate met through the conservative AES at the initial nonentity, and important agenda sequences are spoken in [27]. In this research, they examined five metrics specifically: the graphic study, file size, radiance histogram, assessment by pixel, and show distance. In the file scopes, there were differences wherever it displays the regular worth of the fraction variations to −23.85% from the unique to the encrypt duplicate and −1.45% percentage worth from the innovative to the decrypt duplicate [28]. This paper showed an overview of the latest research studies that are going on in fog computing and the IoT and its uses; it also enlightened the research gaps and directions for further future research studies in the integration of fog computing and IoT (Internet of Things). A modern fog computing framework was presented [29]. The modified AES contained 10 series for encrypting, and the replacement and addition processes of the columns have been substituted by the line change and pixel standard summary. These processes not only decrease the spell complication of the algorithm but also improve the dispersal aptitude to the CCAES (combining the chaos and AES) algorithm.The encrypted descriptions by the CCAES algorithm remained unaffected to the variance occurrences. The project algorithm is protected alongside the entropy occurrences. The simulation consequences illuminate that the minor deviations in the unique appearance and consequences in the important fluctuations in the encrypt duplicate and the innovative appearance cannot be retrieved [30]. This paper described the CloudSim simulator counting its architecture, aces, convicts, and CloudSim forms. Likewise, it characterized exactly how to practice CloudSim demonstration and replication in the cloud environment. Furthermore, it also describe the way to calculate approximate presentation limits like regular reversal time, amount, implementation period, types pan and entire conclusion period, etc. [31].This paper reported dissimilar data safety and privacy security concerns in a cloud calculating environment and suggested a technique for dissimilar security services such as verification, approval, and privacy along with observing in suspension. Cloud computing plans a different technique for obtaining cloud data in the actual environment. 128 bit AES encryption is recycled for privacy, genuineness, and contact controller [32]. In the future work, load balancer by means of My Load Balancer optimization method has been compared with the two greatest well-known weight balancer techniques, i.e., Round-Robin and Supper Present Implementation Freight, also recognized as Active Monitoring Load Balancer. All such Java-based virtual techniques are used to create Cloud analyst toolkit. Graph procedures have been recycling to prove the comparative analysis [33]. The procedure of cryptography involves two main methods which are encryption and decryption. In the encryption method, a basic manuscript is converted to an innovative text which the others cannot deliver and understand additional than the receiver. Blowfish and AES procedures are exploited for executing a hybrid approach connected to cryptography. This consequence in a cryptograph text which can merely be decrypted by the receiver this one [34]. In this paper, obtainable low-control AES architecture by exploiting humble shift catalogues and variation for key/data stored to decrease journey magnitude and control consumption. A low-power method, called clock gating is used to control exchangeable on S-box[35]. In the present study, Abikoye et al.’s modified AES algorithm [13] is presented which is also used in applications to make a comparison. K-L Tsai et al. presented the modified AES-based algorithm for power reduction in IoT using cloud computing applications [14]. In this paper, similarly, VM (virtual machine) allocation policy is used for security which is almost similar to the technique used in the previous work [36].In general, the main purpose of all research studies related to the subject areas is to investigate the possible ways to improve the security of cloud computing services. Therefore, in this work, a secure framework has been proposed for securing confidential tasks being stored in cloud systems using AES encryption methods. Finally, a comparison of the results obtained through this proposed framework and traditional framework work formulated in the past is made which showed significant improvement of cloud computing using the proposed framework. The differences between our modified AES and previously developed or modified AES in the JAVA cipher-based security framework have been discussed in this manuscript. It is pertinent to mention here that our trust-based framework blocks the suspicious users from the network and maintains a queue for such users to protect the trusted users.


## 3. Architecture of the Proposed Secure Framework for Cloud Computing (SFCC)

The architecture of the proposed secure framework for cloud computing (SFCC) is presented in Figure1.Figure 1
Secure framework for cloud computing (SFCC).Framework of secure cloud computing is proposed on the security architecture shown in Figure1, which describes the information for each component and their applications which are required for secure technologies to operate between components in cloud computing. This framework acts in the following conditions checking security, privacy, load balancing, and trust. When the user directs a demand to the cloud benefactor, it responds to the user's request and passes the data through framework gateways. The proposed framework includes the following components:Cloud service provider (CSP) layer: the CSP controls the important sources and ability in construction and calculates the dispersed cloud storage servers processes and directs the live obscure work out method. Its main component is software as a service (SaaS); this is a model in which end users are provided software application (as a service). Platform as a service (PaaS): this model proposed an atmosphere for requests. Development tools that are essential for advanced applications are also provided in this model. Infrastructure as a service (IaaS): this is a platform that offers compulsory properties such as physical machines, virtual machines, and virtual storage.Security service trust management unit: security service trust management controls all the units which include security management; trust management gateways also control the service configuration, respectively. Further details of all units are described in the following.Security management layer: the security management factor offers security and privacy details and implementation functionality. Security service has the following modules and their details.Security control unit: availability is the percentage of time a customer can access the service. Confidentiality (authentication, authorization, and identification) is an integral component of security. It ensures that the information stored on the cloud is protected against the unintended or unauthorized access. Identification user is typically skilful by retaining usernames and passwords after utilizing web browser in order to admit in Cloud. Integrity of data security control is responsible for maintaining the accuracy of data computation that is coming from the combination of different files and is also responsible for its delivery.Attack detection unit: ultimately, slightly usual activities that hover the cloud security necessities (e.g., integrity, confidentiality, and availability) are measured to be occurrences. Wrapping is when the attacker attacks by wrapping the communication between two people, while the users do not know this and think data are still coming from the actual root. Unethical browsing is to find bad actions happening, for example, phishing and spoofing and changing browser certificates.Data protection unit: proposes the AES algorithm to enhance the data security by means of cryptography techniques using AES ciphers as they can encrypt 128 bits’ data blocks within 1000 blocks per second with the double round key feature with less power consumption, load balancing, trust, and resource management on the network efficiently. We have used symmetric identification for security, i.e., the same key for encryption and the same key for decryption as identification of data streams in the form of security. It provides greater efficiency for software as well as hardware. The advantage of using symmetric key is to secure a large amount of data. Data recovery: if data is lost in a disaster that ithas a capability to regain it or restore it.Trust management gateway layer: for the fourth layer, trusted gateways are implemented. These gateways get the encrypted data and decrypt only if the trusted source is connected with a valid internet protocol address of a given domain. These gateways support the issues of trust. There are three gateways in which two are in an alternative manner. In case of the normal gateway is being attacked and misused, other safe gateways shall be chosen to ensure data communication.Service configuration layer: the service enabler makes provision for personalized cloud service using the user’s profile for integration and interoperation. Load balancing can be implemented on hardware, software, or a combination of both. It is important in this configuration that all instances of identity server share the same directory server. Service monitoring: an automatic facility-checking system to assure an extraordinary level of facility presentation and obtainability.User service interface layer: this layer provides different services to select the user via the internet: software as a service (SaaS), platform as a service (PaaS), and infrastructure as a service (IaaS).Service configuration layer: the last unit for the user, IOT, and customer to send and receive data.


## 4. Experimental Setup and Implementation of SFCC

The SFCC can be implemented in real time. The results gathered from the simulations are very accurate. These results are theoretically consistent. Everything is implemented accordingly. Codes are very consistent with real-time mechanisms. The SFCC is developed using CloudSim and iFogSim simulators on the Eclipse integrated development environment. CloudSim is a very well-known and popular among simulators for cloud-based applications. It is responsible for the simulation and events handling at cloud. Some libraries are used for different purposes. Libraries used are JavaScript object notation (Json) data saver, common math, and JFreeChart.The developed simulation comprises SFCC. The proposed framework is generic so that anyone could put one’s idea or logic in this simulation and get the required results. It helps the user to test different scenarios under the proposed algorithm. The simulation has the ability to store and generate a large amount of data. It allows a user to measure the factors such as encryption, description, power consumption, network usage, delays, trusted devices, and service management. The advanced encryption standard for encryption and decryption for data protection is used. The comparison of the algorithm with the previous unmodified algorithms is discussed in later sections. The characteristics of the layers and devices are described in Tables1–11.Table 1
Data centre characteristics of cloud.
Name of the deviceCloudLevel1Uploading bandwidth5000Downloading bandwidth12000Million instructions per second130.0RAM45000Rate per processing usage/MIPS100000Table 2
Data centre characteristics of infrastructure as a service.
Name of the deviceCloud IAASLevel2Uploading bandwidth4000Downloading bandwidth5000Million instructions per second50000RAM40000Rate per processing usage/MIPS400.0Table 3
Data centre characteristics of software as a service.
Name of the deviceCloud SAASLevel2Uploading bandwidth4000Downloading bandwidth5000Million instructions per second60000RAM40000Rate per processing usage/MIPS400.0Table 4
Data centre characteristics of platform as a service.
Name of the deviceCloud PAASLevel2Uploading bandwidth4000Downloading bandwidth5000Million instructions per second60000RAM40000Rate per processing usage/MIPS50000Table 5
Data centre characteristics of security management.
Name of the deviceSecurity managementLevel4Uploading bandwidth5000Downloading bandwidth5000Million instructions per second40000RAM35000Rate per processing usage/MIPS600.0Table 6
Data centre characteristics of gateway1.
Name of the deviceTrusted gateway1Level3Uploading bandwidth3000Downloading bandwidth4000Million instructions per second30000RAM20000Rate per processing usage/MIPS1000.0Table 7
Data centre characteristics of gateway2.
Name of the deviceTrusted gateway2Level3Uploading bandwidth3000Downloading bandwidth4000Million instructions per second30000RAM30000Rate per processing usage/MIPS400.0Table 8
Data centre characteristics of gateway3.
Name of the deviceTrusted gateway3Level3Uploading bandwidth4000Downloading bandwidth4000Million instructions per second50000RAM34000Rate per processing usage/MIPS600.0Table 9
Data centre characteristics of service configuration.
Name of the deviceService configurationLevel1Uploading bandwidth5000Downloading bandwidth5000Million instructions per second100000RAM40000Rate per processing usage/MIPS500.0Table 10
Data centre characteristics of service provider.
Name of the deviceService providerLevel1Uploading bandwidth5000Downloading bandwidth5000 Gbits/secMillion instructions per second50000RAM20000 gbRate per processing usage/MIPS100.0Table 11
Virtual machine configurations.
Virtual machine number levelVirtual machine numberProcessing elementsBandwidth (uplink)Latency inputLevel 022000080010Level 141800010006Level 261600012008


### 4.1. Components

Data centre refers to on-premise hardware, while the cloud refers to off-premise computing. The cloud stores your data in the public cloud, while a data centre stores your data on your hardware. Data centre configuration is displayed in Table1.Infrastructure as a service (IaaS): this is a platform that offers compulsory resources such as physical machines, virtual machines, and virtual storage. Infrastructure-as-a-service configuration is displayed in Table2.Software as a service (SaaS): this is a model in which end users are provided software applications (as a service). Software-as-a-service configuration is displayed in Table3.Platform as a service (PaaS): this model proposed an atmosphere for requests. Development and deployment tools that are essential to advance applications are also provided in this model. Platform-as-a-service configuration is displayed in Table4.Security management: the security management factor offers the security and privacy details and implementation functionality table. Security management configuration is displayed in Table5.Gateway devices at the second-last level of the hierarchy gateway devices are created. These gateway devices are part of the layer responsible for communicating with proxy servers and cloud devices. Here are the characteristics of the gateway devices. Gateway device configuration is displayed in Tables6–8.Service configuration: This facility modifies the cloud service using the user’s profile byintegrating service enabler, load balancing, and service monitoring. Service configuration is displayed in Table9.Service provider: this is the last unit for users and customers to send and receive data. Service provider configuration is displayed in Table10.Virtual machines are created and allocated to hosts to support processing and offloading the modules to support the load balancing mechanism. These virtual machines come with the proposed strong encryption algorithm to support the security and trust feature. The virtual machine configuration is displayed in Table11The materials and methods section should contain sufficient detail to repeat all procedures. It may be divided into headed subsections if several methods are described.


### 4.2. Physical Topology of SFCC

The physical topology shows the pattern of nodes and devices in the network. Physical entities are created, and their competence, capability, and configurations are specified. These entities include sensors, actuators, gateways, and cloud VM (virtual machines). The links between these entities and their configuration are also established. Physical network topology is important to understand the pattern of the network, how various network devices are organized, and how they communicate with each other. These configurations and capacity determine the load a network can tolerate and the amount of data it can transfer. The physical topology is shown in Figure2.Figure 2
Physical network topology.


### 4.3. Explanation Topology

The computing mechanism of cloud always happens at the top. Cloud stays at the top to manage the lower-level architecture [37]. The three different types of cloud stay below the top layer and act as CSPs [38] according to customers’ need. For the third layer, the virtual machine allocation policy mechanism is implemented to support data offloading and privacy for security [39] in the proposed system. Offloading the modules not only provides load balancing but also solves the security issues of cloud by providing a new layer on the hosts. Virtual machines are created and allocated to the hosts to support processing and offloading of the modules to support the load balancing mechanism. These virtual machines come with a strong encryption algorithm to support the security and trust feature.The virtual machine requires some storage and processing capabilities similar to a hostH in nature. Equation (1) represents the conditions for creating a virtual machine. The Vm size is always smaller than the available host H and storage S, where the number of Vms depends on the size of load β.IfH = {H1, H2, H3, …, Hn } and V = {Vm1, Vm2, Vm3,… Vm N}, then(1)∃Vm∈H∪S:Vm∝βwhereH∩S≫Vm,:Vm1,Vm2,Vm3,…,Vm<H1,H2,H3,…,H,∀V∃Vm1,Vm2,Vm,…,VmN∈H.Equation (1) represents how VM creation is carried out under various rules and conditionsFor the fourth layer, trusted gateways are implemented. These gateways get the encrypted data and decrypt only if a trusted source is connected with a valid Internet protocol address of a given domain. These gateways support the issues of trust [40]. There are 3 gateways in which 2 are alternate manner. In case of a normal gateway is being attacked and misused, other safe gateways shall be chosen to ensure data communication, as shown in Figure 3.Figure 3
Trusted gateways.Trusted gateways put the blacklist users into the blocked users’ category to ensure the security and privacy of trusted users. The fifth layer is responsible for 3 functions. These functions include service monitoring, load balancing, and service enabling/disabling. The bottom-most layer is based on the users of cloud, and it represents the Internet-of-Things layer in the proposed system. This is how all the aforementioned proposed frameworks work. The trusted customer stays as long as a mediator (trustee) stays. And a mediator stays as long as the cloud service providers are trustable. The chain of trust can be seen in Figure4 [41].Figure 4
Mediator of cloud service providers’ trusted chain.


### 4.4. Changesin Traditional AES Algorithm

The high-level flow of the proposed AES algorithm in a standard way is presented in Figure5.Figure 5
Flow diagram of the proposed algorithm.


#### 4.4.1. Changes in the Traditional AES Algorithm vs. the Proposed Algorithm

The cloud computing confidentiality framework is presented in this paper. In this framework, data integrity mechanism is used to enhance the data security by the means of cryptography technique. The modified AES (advance encryption standard) ciphers as it can encrypt 128 bit data blocks within 1000 cycles with low power, time, and delay of network consumption. The other work of the frameworks is load balancing, trust, and resource management on the network efficiently.We have used symmetric identification for security, i.e., the same key for encryption and decryption as identification of data streams in the form of security. The difference between the proposed and previously developed AES is that we have also encrypted 1000 blocks per second with the double round key feature. Previously developed AES uses a single round key with 800 blocks per second. The advantage of using symmetric key is to secure a large amount of data.


### 4.5. AES Substitution Box (S-Box)

The primary stage to around, remains to organize a byte by byte replacement through a lookup table called a substitution box or simply S-box. The S-Boxescarry out one to one plotting for all byte values from 0 to 255 in 16 × 16 arrays. Replacement is a nonlinear conversion which achieves misperception of bits. A nonlinear revolution is vital for each current encryption algorithm and shown to be solid cryptographic original in contradiction to direct and disparity cryptanalysis. The S-box is shown Figure6. All values are represented in hexadecimal notation [42]. The general substitution box for adding round keys is given in Figure 6.Figure 6
Substitution box [42].Rows are represented byx, and columns are represented by y. The mixing process is done with XOR denoted by the symbol ⊕. The binary example in the following will illustrate the functionality of the XOR operator. The row and column mixing and shifting are done by Shift (x_row, y_clolumn) function. The transformed arrays x and y are converted into binaries using ASCII__ASCII 256 standard. Then, the XOR operator performs its ⊕ operation on the bits to generate the ASCII- (American Standard Code for Information Interchange-) generated ciphertext. The cryptographic technique used in SFCC is presented in the low-level language as follows:(2)CiTenc=1N∑i=01Xr⊕Yc,(3)CiTdec=N∑i=0Xc⊕Yr.⟶putfieldjavax.crypto.Cipher.spi:javax.crypto.CipherSpiexec_0 [this] exec_2 [x__rows] (i)⟶putfieldjavax.crypto.Cipher.provider:java.security.Providerexec_0 [this] exec_3 [y__columns] (ii)⟶putfieldjavax.crypto.Cipher.transformation:java.lang.Stringexec_0 [this] (iii)⟶getstaticjavax.crypto.CryptoAllPermission. INSTANCE:javax.crypto.CryptoAllPermission (iv)⟶putfieldjavax.crypto.Cipher.cryptoPerm:javax.crypto.CryptoPermissionexec_0 [this]aconst_null (v)⟶putfieldjavax.crypto.Cipher.lock:java.lang.Object return ∏; (vi)The example of ⊕ is given as follows.LetX = 11102 and Y = 10012. Then, XOR of X and Y is represented by Z:(4)Z=X⊕Y=01112.Z = 01112 is the result of this operand. Table 12 displays the result in the tabular form.Table 12
XOR operations.
XYZ (result)110101101011


## 4.1. Components

Data centre refers to on-premise hardware, while the cloud refers to off-premise computing. The cloud stores your data in the public cloud, while a data centre stores your data on your hardware. Data centre configuration is displayed in Table1.Infrastructure as a service (IaaS): this is a platform that offers compulsory resources such as physical machines, virtual machines, and virtual storage. Infrastructure-as-a-service configuration is displayed in Table2.Software as a service (SaaS): this is a model in which end users are provided software applications (as a service). Software-as-a-service configuration is displayed in Table3.Platform as a service (PaaS): this model proposed an atmosphere for requests. Development and deployment tools that are essential to advance applications are also provided in this model. Platform-as-a-service configuration is displayed in Table4.Security management: the security management factor offers the security and privacy details and implementation functionality table. Security management configuration is displayed in Table5.Gateway devices at the second-last level of the hierarchy gateway devices are created. These gateway devices are part of the layer responsible for communicating with proxy servers and cloud devices. Here are the characteristics of the gateway devices. Gateway device configuration is displayed in Tables6–8.Service configuration: This facility modifies the cloud service using the user’s profile byintegrating service enabler, load balancing, and service monitoring. Service configuration is displayed in Table9.Service provider: this is the last unit for users and customers to send and receive data. Service provider configuration is displayed in Table10.Virtual machines are created and allocated to hosts to support processing and offloading the modules to support the load balancing mechanism. These virtual machines come with the proposed strong encryption algorithm to support the security and trust feature. The virtual machine configuration is displayed in Table11The materials and methods section should contain sufficient detail to repeat all procedures. It may be divided into headed subsections if several methods are described.


## 4.2. Physical Topology of SFCC

The physical topology shows the pattern of nodes and devices in the network. Physical entities are created, and their competence, capability, and configurations are specified. These entities include sensors, actuators, gateways, and cloud VM (virtual machines). The links between these entities and their configuration are also established. Physical network topology is important to understand the pattern of the network, how various network devices are organized, and how they communicate with each other. These configurations and capacity determine the load a network can tolerate and the amount of data it can transfer. The physical topology is shown in Figure2.Figure 2
Physical network topology.


## 4.3. Explanation Topology

The computing mechanism of cloud always happens at the top. Cloud stays at the top to manage the lower-level architecture [37]. The three different types of cloud stay below the top layer and act as CSPs [38] according to customers’ need. For the third layer, the virtual machine allocation policy mechanism is implemented to support data offloading and privacy for security [39] in the proposed system. Offloading the modules not only provides load balancing but also solves the security issues of cloud by providing a new layer on the hosts. Virtual machines are created and allocated to the hosts to support processing and offloading of the modules to support the load balancing mechanism. These virtual machines come with a strong encryption algorithm to support the security and trust feature.The virtual machine requires some storage and processing capabilities similar to a hostH in nature. Equation (1) represents the conditions for creating a virtual machine. The Vm size is always smaller than the available host H and storage S, where the number of Vms depends on the size of load β.IfH = {H1, H2, H3, …, Hn } and V = {Vm1, Vm2, Vm3,… Vm N}, then(1)∃Vm∈H∪S:Vm∝βwhereH∩S≫Vm,:Vm1,Vm2,Vm3,…,Vm<H1,H2,H3,…,H,∀V∃Vm1,Vm2,Vm,…,VmN∈H.Equation (1) represents how VM creation is carried out under various rules and conditionsFor the fourth layer, trusted gateways are implemented. These gateways get the encrypted data and decrypt only if a trusted source is connected with a valid Internet protocol address of a given domain. These gateways support the issues of trust [40]. There are 3 gateways in which 2 are alternate manner. In case of a normal gateway is being attacked and misused, other safe gateways shall be chosen to ensure data communication, as shown in Figure 3.Figure 3
Trusted gateways.Trusted gateways put the blacklist users into the blocked users’ category to ensure the security and privacy of trusted users. The fifth layer is responsible for 3 functions. These functions include service monitoring, load balancing, and service enabling/disabling. The bottom-most layer is based on the users of cloud, and it represents the Internet-of-Things layer in the proposed system. This is how all the aforementioned proposed frameworks work. The trusted customer stays as long as a mediator (trustee) stays. And a mediator stays as long as the cloud service providers are trustable. The chain of trust can be seen in Figure4 [41].Figure 4
Mediator of cloud service providers’ trusted chain.


## 4.4. Changesin Traditional AES Algorithm

The high-level flow of the proposed AES algorithm in a standard way is presented in Figure5.Figure 5
Flow diagram of the proposed algorithm.


### 4.4.1. Changes in the Traditional AES Algorithm vs. the Proposed Algorithm

The cloud computing confidentiality framework is presented in this paper. In this framework, data integrity mechanism is used to enhance the data security by the means of cryptography technique. The modified AES (advance encryption standard) ciphers as it can encrypt 128 bit data blocks within 1000 cycles with low power, time, and delay of network consumption. The other work of the frameworks is load balancing, trust, and resource management on the network efficiently.We have used symmetric identification for security, i.e., the same key for encryption and decryption as identification of data streams in the form of security. The difference between the proposed and previously developed AES is that we have also encrypted 1000 blocks per second with the double round key feature. Previously developed AES uses a single round key with 800 blocks per second. The advantage of using symmetric key is to secure a large amount of data.


## 4.4.1. Changes in the Traditional AES Algorithm vs. the Proposed Algorithm

The cloud computing confidentiality framework is presented in this paper. In this framework, data integrity mechanism is used to enhance the data security by the means of cryptography technique. The modified AES (advance encryption standard) ciphers as it can encrypt 128 bit data blocks within 1000 cycles with low power, time, and delay of network consumption. The other work of the frameworks is load balancing, trust, and resource management on the network efficiently.We have used symmetric identification for security, i.e., the same key for encryption and decryption as identification of data streams in the form of security. The difference between the proposed and previously developed AES is that we have also encrypted 1000 blocks per second with the double round key feature. Previously developed AES uses a single round key with 800 blocks per second. The advantage of using symmetric key is to secure a large amount of data.


## 4.5. AES Substitution Box (S-Box)

The primary stage to around, remains to organize a byte by byte replacement through a lookup table called a substitution box or simply S-box. The S-Boxescarry out one to one plotting for all byte values from 0 to 255 in 16 × 16 arrays. Replacement is a nonlinear conversion which achieves misperception of bits. A nonlinear revolution is vital for each current encryption algorithm and shown to be solid cryptographic original in contradiction to direct and disparity cryptanalysis. The S-box is shown Figure6. All values are represented in hexadecimal notation [42]. The general substitution box for adding round keys is given in Figure 6.Figure 6
Substitution box [42].Rows are represented byx, and columns are represented by y. The mixing process is done with XOR denoted by the symbol ⊕. The binary example in the following will illustrate the functionality of the XOR operator. The row and column mixing and shifting are done by Shift (x_row, y_clolumn) function. The transformed arrays x and y are converted into binaries using ASCII__ASCII 256 standard. Then, the XOR operator performs its ⊕ operation on the bits to generate the ASCII- (American Standard Code for Information Interchange-) generated ciphertext. The cryptographic technique used in SFCC is presented in the low-level language as follows:(2)CiTenc=1N∑i=01Xr⊕Yc,(3)CiTdec=N∑i=0Xc⊕Yr.⟶putfieldjavax.crypto.Cipher.spi:javax.crypto.CipherSpiexec_0 [this] exec_2 [x__rows] (i)⟶putfieldjavax.crypto.Cipher.provider:java.security.Providerexec_0 [this] exec_3 [y__columns] (ii)⟶putfieldjavax.crypto.Cipher.transformation:java.lang.Stringexec_0 [this] (iii)⟶getstaticjavax.crypto.CryptoAllPermission. INSTANCE:javax.crypto.CryptoAllPermission (iv)⟶putfieldjavax.crypto.Cipher.cryptoPerm:javax.crypto.CryptoPermissionexec_0 [this]aconst_null (v)⟶putfieldjavax.crypto.Cipher.lock:java.lang.Object return ∏; (vi)The example of ⊕ is given as follows.LetX = 11102 and Y = 10012. Then, XOR of X and Y is represented by Z:(4)Z=X⊕Y=01112.Z = 01112 is the result of this operand. Table 12 displays the result in the tabular form.Table 12
XOR operations.
XYZ (result)110101101011


## 5. Results and Discussion

In order to check and test the efficiency of the proposed algorithm, a simple code is used. This test helped us to prove that the proposed AES algorithm is better than any other AES algorithm, and after implementation of AES and advanced AES code on hardware will reduce the execution time. The SFCC results as performed and the implementation of this security framework for cloud computing. The period actsas an energetic character during the peers of key, encryption, and decryption procedure. Altogether, inquiries remain complete on Intel(R) Core-i3 with CPU 2.27 GHz processor, 4 GB RAM on Windows 10 at the work framework by using CloudSim with iFogSim as simulators on Eclipse integrated development environment. CloudSim is a very well-known and popular among simulators for cloud-based applications.Various parameters such as encryption, decryption, energy consumption, network usage, network delay, trusted devices, and service management devices are compared. The same algorithms are implemented in real-time applications to solve the aforementioned issues. The results gathered from the simulations are very accurate. Codes are very consistent with real-time mechanisms. The simulators are redesigned according to the application need. The implementation period is a basic of the spell that is required to change a basic text to an encryption manuscript and vice versa, while encryption time that is referred to the time taken to change a basic text to a ciphertext and decryption which is referred to the time required to convert a cipher text to a plain text are both predicted to be short in instruction to take rapid and approachable system. Moreover, this execution time somehow is contingent on the layout of the system used. Table13 offers the execution period in milliseconds (ms), which is obtained by computing the average encryption/decryption time after encrypting/decrypting the input text in 0.5 MB sizes while using the same key run on 16, 32, 64 and 128 bytes.Table 13
Execution time test result [13].
Plain text size (bytes)AESAvrg. encryption time (ms)Avrg. decryption time (ms)16Existing AES0.16580.1789Proposed AES0.11900.148132Existing AES0.29760.3114Proposed AES0.25070.283964Existing AES0.45640.4626Proposed AES0.39160.4590128Existing AES0.69840.5911Proposed AES0.60140.58050.5Existing AES2359.652269.32Proposed AES2159.82207.1Table13 presents the execution time test results in milliseconds (ms), which are attained by computing the average encryption/decryption time after encrypting/decrypting the input text in 0.5 MB sizes of the while using the same key run on 16, 32, 64, and 128 bytes. The results of Figures 7–9 specify that the existing AES has a minor rise in the encryption and decryption time after matched to the existing AES algorithm. Table 13 presents the time comparison between existing AES and different proposed AES algorithms for a string key.Figure 7
Encrypting time: existing AES vs. proposed AES.Figure 8
Decrypting time: existing AES vs. proposed AES.Figure 9
Encrypting and decrypting time: existing AES vs. proposed AES.


### 5.1. Avalanche Effect

In cryptography, stuff called dispersal reproduces the cryptographic asset of an algorithm. If there is a small alteration in an input, the output changes meaningfully. This is also called the inundation effect. Avalanche consequence is leisurely by means of pretense reserve. Hamming reserve in material philosophy is the amount of variation. Playacting reserve is the amount of bit-by-bit XOR bearing in mind ASCII value as it develops informal to devise programmatically. A high gradation of dispersal, i.e., extraordinary avalanche consequence, is anticipated. Avalanche’s conclusion reproduces the presentation of a cryptographic algorithm. The avalanche effect is described in Table14.Table 14
Avalanche effect test result obtained after flipping a single bit in the plain text [13].
Execution programPlain textSecret keyEncryption and decryption timeExecution timeFirst time executionI Love Unimorin!H2 + 3S + MuePgIPK3h9SAHOtl6THtl8ak062IgB3ixEtoEncryption time0.05172414Decryption time0.03448276Second executionI Love Unimorin!1mRVUf7lRS7W/K + BWFRkP3//KKjf0FtIaSnIGArvudY=Encryption time0.06666667Decryption time0.044444446The avalanche effect is described in Figure 10(simulation results from Table14)Figure 10
Avalanche effect test result.


### 5.2. Comparative Analysis of Computed Results with the Existing Work

A comparative analysis of computed consequences with the current work is presented as follows. However, some researchers analyzed the performance of their advanced AES version. Meanwhile, many authors used encryption and description time as their performance metrics. The simulation environmental comparison between proposed AES and other AES using the CloudSim simulator is graphically represented in Figures11 and 12.Figure 11
Encryption processing time factor in different AES.Figure 12
Decryption processing time factor in different AES.


### 5.3. Average Energy Consumed

By using the same technique described in [13], the energy consumption is being evaluated. These experiments shared that the proposed frameworks have 14% less energy consumption as compared to [13]. Actual cost taken is given by encryption and the average current that is used by every CPU clock cycle. Equation (5) is used to calculate energy cost per byte as well as various keys of AES encryption schemes:(5):∑E=Ec+TL−TcTu–P∗M,where C, L. and u represent the current, last, and updated, respectively.The energy consumptionE is the amount of work done on processing Mips M under a time frame T using power model P. The mathematical notation to represent the energy consumption is described in Figure 13.Figure 13
Energy consumption for different key AES encrypting and decrypting.


### 5.4. Average Network Usage

Network usage is the overall network usage for the system. Network usage is represented in kilobytes. This parameter defines the usage of network resources. The length is reduced and approaches of requests to lower hierarchy by using service configuration so that the request could be processed in the lower hierarchy rather than sending it to cloud again and again. This algorithm reduces 3-hop communication to single-hop communication. Thus, low network usage is obtained through the proposed framework. The more the network is used, the more the expenditure. Efficient network topologies prefer to use minimal network. In these experiments, the network usage is evaluated using the same technique described in [13]. In the proposed framework, network resources are reduced by 11% as compared to [13]. The network while running the implemented encryption schemes is calculated using the following equation:(6):∑Nu=Ni+L∗D∗BT,where Ni is the initial network usage (Nu at 0).The network usage mathematical notationNu is the number of bits B communicated in a certain time frame on devices under sets of data D with latency L. Simulation result is clear from Figure 14.Figure 14
Network usage for different key AES encrypting and decrypting.


### 5.5. Average Networking Delay

In the calculation of testing and evaluating whether the data are secured, delay is likewise evaluated. In the local host cloud environment amount of consumers; the data traffic will develop tall, which will have influence on the scheme. In a real environment, numerous issues could cause delays, e.g., the size of the key and network speeds, which will cause suspensions and overcrowding. The larger numbers of key indicate increased delay due to the time when more data encrypt generate. When the key, it is originally split into dissimilar blocks formerly encryption. The scope of individual block may have contingent influence on the scope. The delay comparison of the previous methodology [13] and the research shows that the significant differences in the delay indicate that the proposed framework is 15% better than the previous solution [13].(7)∑Dn=Bs∗LT−Bd∗L1−TTe.The delayD represents the time that the bits B take to reach a processing device from an end device under a certain latency L and connection time T. The observed delay is calculated using the equation. The mathematical notation to represent the delay is described below and by simulation result it is clear from figure. The delay calculation is shown in Figure 15.Figure 15
Networking delay for different key AES encrypting and decrypting.


## 5.1. Avalanche Effect

In cryptography, stuff called dispersal reproduces the cryptographic asset of an algorithm. If there is a small alteration in an input, the output changes meaningfully. This is also called the inundation effect. Avalanche consequence is leisurely by means of pretense reserve. Hamming reserve in material philosophy is the amount of variation. Playacting reserve is the amount of bit-by-bit XOR bearing in mind ASCII value as it develops informal to devise programmatically. A high gradation of dispersal, i.e., extraordinary avalanche consequence, is anticipated. Avalanche’s conclusion reproduces the presentation of a cryptographic algorithm. The avalanche effect is described in Table14.Table 14
Avalanche effect test result obtained after flipping a single bit in the plain text [13].
Execution programPlain textSecret keyEncryption and decryption timeExecution timeFirst time executionI Love Unimorin!H2 + 3S + MuePgIPK3h9SAHOtl6THtl8ak062IgB3ixEtoEncryption time0.05172414Decryption time0.03448276Second executionI Love Unimorin!1mRVUf7lRS7W/K + BWFRkP3//KKjf0FtIaSnIGArvudY=Encryption time0.06666667Decryption time0.044444446The avalanche effect is described in Figure 10(simulation results from Table14)Figure 10
Avalanche effect test result.


## 5.2. Comparative Analysis of Computed Results with the Existing Work

A comparative analysis of computed consequences with the current work is presented as follows. However, some researchers analyzed the performance of their advanced AES version. Meanwhile, many authors used encryption and description time as their performance metrics. The simulation environmental comparison between proposed AES and other AES using the CloudSim simulator is graphically represented in Figures11 and 12.Figure 11
Encryption processing time factor in different AES.Figure 12
Decryption processing time factor in different AES.


## 5.3. Average Energy Consumed

By using the same technique described in [13], the energy consumption is being evaluated. These experiments shared that the proposed frameworks have 14% less energy consumption as compared to [13]. Actual cost taken is given by encryption and the average current that is used by every CPU clock cycle. Equation (5) is used to calculate energy cost per byte as well as various keys of AES encryption schemes:(5):∑E=Ec+TL−TcTu–P∗M,where C, L. and u represent the current, last, and updated, respectively.The energy consumptionE is the amount of work done on processing Mips M under a time frame T using power model P. The mathematical notation to represent the energy consumption is described in Figure 13.Figure 13
Energy consumption for different key AES encrypting and decrypting.


## 5.4. Average Network Usage

Network usage is the overall network usage for the system. Network usage is represented in kilobytes. This parameter defines the usage of network resources. The length is reduced and approaches of requests to lower hierarchy by using service configuration so that the request could be processed in the lower hierarchy rather than sending it to cloud again and again. This algorithm reduces 3-hop communication to single-hop communication. Thus, low network usage is obtained through the proposed framework. The more the network is used, the more the expenditure. Efficient network topologies prefer to use minimal network. In these experiments, the network usage is evaluated using the same technique described in [13]. In the proposed framework, network resources are reduced by 11% as compared to [13]. The network while running the implemented encryption schemes is calculated using the following equation:(6):∑Nu=Ni+L∗D∗BT,where Ni is the initial network usage (Nu at 0).The network usage mathematical notationNu is the number of bits B communicated in a certain time frame on devices under sets of data D with latency L. Simulation result is clear from Figure 14.Figure 14
Network usage for different key AES encrypting and decrypting.


## 5.5. Average Networking Delay

In the calculation of testing and evaluating whether the data are secured, delay is likewise evaluated. In the local host cloud environment amount of consumers; the data traffic will develop tall, which will have influence on the scheme. In a real environment, numerous issues could cause delays, e.g., the size of the key and network speeds, which will cause suspensions and overcrowding. The larger numbers of key indicate increased delay due to the time when more data encrypt generate. When the key, it is originally split into dissimilar blocks formerly encryption. The scope of individual block may have contingent influence on the scope. The delay comparison of the previous methodology [13] and the research shows that the significant differences in the delay indicate that the proposed framework is 15% better than the previous solution [13].(7)∑Dn=Bs∗LT−Bd∗L1−TTe.The delayD represents the time that the bits B take to reach a processing device from an end device under a certain latency L and connection time T. The observed delay is calculated using the equation. The mathematical notation to represent the delay is described below and by simulation result it is clear from figure. The delay calculation is shown in Figure 15.Figure 15
Networking delay for different key AES encrypting and decrypting.


## 6. Conclusion

To provide data confidentiality and information integrity of users’ data in the cloud computing environment, an effective security framework is proposed that provides a mechanism through which communication is protected and unauthorized access is restricted. The proposed security framework allows cloud users to securely handle the privacy and integrity of data.It also allows security, privacy, network usage, and storage in the cloud without depending on the plausibility of the cloud provider. The application of the AES algorithm provides a strong foundation that protects data stored in the cloud as well as authorizes access to data only on successful authentication and verification. The delays that occur in the actual environment vary in different situations all of which are not considered in this framework. Results show that the proposed framework minimizes energy consumption by 14.43%, network usage by 11.53%, and delay by 15.67%. Hence, the proposed framework enhances security, minimizes resource utilization, and reduces delay while deploying services of computational clouds.



---

*Source: 8863345-2020-09-01.xml*