Protecting the resources of a cloud-native application is essential to meet an organization’s security goals. Cloud-native applications manage thousands of user requests, and an organization must employ a proper access control mechanism. However, unfortunately, developers sometimes grumble when designing and enforcing access decisions for a gigantic scalable application. It is sometimes complicated to choose the potential access control model for the system. Cloud-native software architecture has become an integral part of the industry to manage and maintain customer needs. A microservice is a combination of small independent services that might have hundreds of parts, where the developers must protect the individual services. An efficient access control model can defend the respective services and consistency. This study intends to comprehensively analyze the current access control mechanism and techniques utilized in cloud-native architecture. For this, we present a systematic mapping study that extracts current approaches, categorizes access control patterns, and provides developers guidance to meet security principles. In addition, we have gathered 234 essential articles, of which 29 have been chosen as primary studies. Our comprehensive analysis will guide practitioners to identify proper access control mechanisms applicable to ensuring security goals in cloud-native architectures.

https://www.mdpi.com/1424-8220/23/7/3413/pdf?version=1679642948

Access Control Design Practice and Solutions in Cloud-Native Architecture: A Systematic Mapping Study

AbstractOnline company for various fields now has high margins due to its more transparent and complex nature. Several data holders’ data can be shared with third-party vendors when conducting online business, and those third-party vendors can then share it with end users through those data vendors. If the data owner wishes to sell any digital content over online sources when processing these things, it is presently very difficult to keep track of data protection, privacy, and honesty while doing it. In this paper, privacy preserving and authentication and access control scheme in data markets are implemented. In this, online database performs the revocation and registration process. First, user should register with raw data. The raw data will be authenticated using authenticated data encryption technique. Next, this encrypted data will be processed using data processing. Pseudo-identity generation will provide the password for driver authentication. After data is encrypted, it is verified. This is verified based on two batches. First batch will be used for verification, and second batch will collect the encrypted data. At last, online data will be secured very effectively.KeywordsData marketsData truthfulnessPrivacy preservationSecurityTPMHomomorphic encryption 

Privacy Preserving Authentication and Access Control Scheme in Data Markets

Data is a most valuable part of most of nowadays system. A lot of hackers and criminals are trying to steal this data all the time. Due to that data should also be the best protected part of every company's systems. We would like our systems to be impenetrable, but that is not possible. If we want to protect the data, in case our system is compromised, we need to use encryption. This article describes traditional ways of database encryption, modern concept of securing data and some possible concepts how to secure the data using encryption. All of these approaches are discussed from high-level point of view to show their impact on security of entire system.

Martin Ocenas

Papers

Security and Encryption at Modern Databases