Security and integrity of result computations in cloud computing environment

Project Abstract

<p> There is a growing trend of using cloud environments for ever growing storage and data processing needs. However, adopting a cloud computing paradigm may have positive as well as negative effects on the data security of servicing consumers. The focus of this research is on the development of a proof-of-concept system for security and integrity of result computations in a cloud computing environment by implementing &nbsp;a four level cloud based application security gateway methodology for result computations that would help protect data from all forms of un-authorized access . The application was developed using PHP, Hypertext pre-processor, AJAX, JavaScript, Extended markup language (XML) and MySql database as the backend engine. The developed system evaluation and testing show a significant difference in system response time, data consistency, availability of large storage capacity to meet increasing demand of data and secured access gateway to vital recourses. <br></p>

Project Overview

<p> </p><p><strong>INTRODUCTION</strong></p><p><strong>1.1<br>Background of the Study</strong></p><p>Generally<br>it is known that in our knowledge and technology-driven global village, each<br>country’s economic and social well-being depends on its ability to harness its<br>human resources through a dynamic and innovative educational system that<br>thrives on and propels technological development. This required link between<br>educational and technological development is particularly critical at the<br>higher levels of the educational system, and especially, university education.<br>Internet connectivity and various forms of web-enabled technologies are growing<br>exponentially, and more and more information is becoming available on-line,<br>thereby opening up new information research and networking opportunities. These<br>developments are erasing the traditional borders and boundaries of learning,<br>and leading to radical changes in the activities of scholarly communities.<br>Modern university education now depends on a robust programme of automated<br>information services to support and facilitate teaching, learning, research and<br>management. This scenario of accelerated technological change poses new<br>challenges and opportunities for universities, and Nigerian universities must<br>re-position themselves quickly and continuously to exploit prevailing<br>information technologies to efficiently meet their teaching, learning and research<br>mission. This research work is therefore centered on cloud computing which is<br>an unexplored technology most especially in the Education. Cloud<br>computing is a recent concept that is still evolving across the information<br>technology industry and academia. Several definitions have evolved so far, the<br>National Institute of Standards and Technology (Mell and Grance, 2011), defines<br>cloud computing as “a model for enabling convenient, on-demand network access<br>to a shared pool of configurable computing resources (e.g., networks, servers,<br>storage, applications, and services) that can be rapidly provisioned and<br>released with minimal management effort or service provider interaction Ë®.<br>There are three major types of cloud computing services: First, Processing Clouds<br>that provide scalable and mostly affordable computing resources that run<br>enterprise programs, which is also sometimes known as Infrastructure as a<br>service (IaaS), Secondly, Storage Clouds<br>that offer an alternative to local file systems also known as &nbsp;Platform as a Service (PaaS), and thirdly, Application<br>Clouds that allow a thin client to interact with services that are completely<br>hosted on an external infrastructure also called Software as a Service (SaaS) (Ajith<br>and Hemalatha, 2012).</p><p>The basic principle of cloud computing entails the reduction<br>of in-house data centres and the delegation of a portion or all of the<br>Information Technology infrastructure capability to a third party. This holds<br>the promise of driving down cost while fostering innovation and promoting educational<br>development. Institutions of higher learning, such as Universities and<br>Colleges, are the core of innovation through their advanced research and<br>development. Subsequently, higher Institutions may benefit greatly by exploiting<br>the power of cloud computing, including cost cutting as well as all the above<br>types of cloud services (Goetzinger, 1962). This research work presents a frame<br>work for implementing necessary security and integrity of result computation in<br>cloud computing environment in tertiary institutions in Nigeria. Mathematically, a result is a quantity or<br>expression obtained by calculation after an examination while result<br>computation is a mathematical process or calculation involving numbers or<br>quantities obtained from the outcome of an examination based on institutional<br>rules guiding result computation. Nigerian Universities are facing<br>problems in providing necessary Information Technology (IT) support for<br>educational, research and development activities. Every year, lots of data are<br>collected, used and stored in Nigerian Universities, such as student’s personal<br>information, admission details, courses offered, examination scores, etc. These<br>data increases every year as the number of students increases and must be made<br>available or accessible, even many years after completion of a programme from a<br>University which could span for a minimum of four years. These large volume of<br>data requires lots of storage and computing resources such as speed, storage<br>memory, efficiency, etc. </p><p><strong>1.2 Statement of Problem</strong></p><p>The entire<br>process of result computation begins with the collation of individual course<br>lecturer’s result or scores which are <br>submitted to the Head of Department depending on the institution’s<br>policy guiding result submission and computation. After collation, the results<br>are then handed over to the examination officer or submitted to a central office<br>with the responsibility of computing results. The questions that come to mind<br>are; how secured are the data? How often will the data storage capacity be<br>increased to enable it meet the increasing demand of the data? How is the<br>integrity of the data maintained? What is the cost of providing and maintaining<br>the required storage and computing resources? How available or accessible are<br>the data?.</p><p>Mostly,<br>these records are manually processed by collating individual candidate’s<br>results and computed by the designated officer(s) before results are being produced.<br>The above named processes are faced with the following challenges:</p><ul><li><strong>Time<br>wasting:</strong>&nbsp;A proper evaluation of the manual system of result<br>computation shows that lots of time is being wasted during the processes<br>involved in computation of results. These includes the time wasted awaiting<br>result submission from individual lecturers, manual computation of individual<br>student’s result, time wasting due to system break down, correction of errors,<br>having to wait for a system expert to solve trivial problems that basic<br>knowledge of computer would have solved, etc.</li><li><strong>Data<br>Inconsistency:</strong>&nbsp;Following the processes<br>involved in computation of result, the possibility of errors cannot be ruled<br>out since a lot of persons are involved in the computation processes. Thus, the<br>consistency of the result, is therefore<br>not guaranteed.</li><li><strong>High Cost<br>of Ownership: </strong>There is a realization in Nigeria that the government alone<br>cannot adequately shoulder the high cost of quality education in the 21st<br>century. Partnership between government, industry and stakeholders appears to<br>be the preferred option. In Nigeria, a number of organizations for example,<br>Education Trust Fund (ETF), Petroleum Technology Development Fund (PTDF),<br>National Information Technology Development Agency (NITDA) etc donate ICT<br>laboratories equipped with computers to some tertiary institutions. In addition<br>they pay for one year or two years maintenance fee and mandate the recipient<br>institution to sustain the facility. Most of these laudable efforts have failed<br>because the recipients were unable to pay for the high cost of system<br>maintenance and system upgrade. This is because the cost of ICT Infrastructure<br>in Nigeria consist of not only capital cost but also high operating cost. Thus<br>the cost of ownership is very high.</li><li><strong>De-centralization:<br></strong>Currently,<br>some Universities do result computation manually or electronically on<br>standalone systems i.e. individual departmental result resides on different computers or devices.<br>Therefore, the security of such result cannot be guaranteed i.e. the<br>decentralization of results makes it difficult to protect the data from illegal<br>usage or unforeseen data loss. Thus, it is the investigation of the above<br>problems and providing solutions that this research work is based on.</li></ul><p><strong>1.3 Objective of the Study</strong></p><p>The objectives<br>of this research work are to develop a system that should be able:</p><p>i &nbsp; &nbsp; &nbsp; &nbsp; to compute result in cloud environment.</p><p>ii. &nbsp; &nbsp; &nbsp; to provide a 4-level security system for maintaining<br>the security and &nbsp; &nbsp; &nbsp; integrity of<br>result computation in cloud computing environment.</p><p><strong>1.4 &nbsp; &nbsp; Scope of the Study</strong></p><p>The<br>scope of this work is to develop a cloud based software which will be deployed<br>using a private cloud deployment model. This application will majorly be used<br>for the computation of result in Nigerian universities with strictly adherence<br>to the application security by proposing a four-level user authentication.</p><p><strong>1.5 &nbsp; &nbsp; Limitation of the<br>Study</strong></p><p>There<br>are numbers of limitation that are to be noted in this research work:</p><p>i.<br>The infrastructures used is this research work is an abstract model of the<br>proposed data centre used in the work, this is due to insufficient fund to set<br>up the real scenario of the proposed model .</p><p>ii.<br>Cloud computing<br>is an emerging computing paradigm<br>that is yet to be embraced in this part of the globe and therefore made it difficult to source<br>for research materials needed for this work.</p><p><strong>1.6 &nbsp; &nbsp; Significance of<br>the study</strong></p><p>The study will provide the Nigerian Universities with a reliable and secured environment for result computation which is fast, effective and efficient for result processing and management with little or no concern to the storage and computing resources (speed, storage capacity, etc.). Most importantly, the study will also foster the reduction of the huge financial budget invested into IT on Nigerian Universities. Also, the time wasted in the result computation processes will be largely reduced thereby propelling institutional development. Over the years, nigerian universities have been computing results manually which usually results into large volume of paper usage, not only that the papers degradate over the years but also a lot of valuable storage spaces are being used for the safe keeping. Thus, this research work is geared at solving the storage problems and also to foster future usage and accessiblity of records amongst others. The adoption of cloud technology with the peculiarity of it’s price models would help to reduce the stained educational budget for running ICT projects in the nigerian universities, this could also serve asan optimun solutions to other ICT needs within the university and could also foster content sharing, collaboration and research within local and internationl universities.</p> <br><p></p>