Aim:

        The main aim of this project is to provide a reliable and secure cloud service and also increase trustworthiness of certifications by Continuous Auditing.

Introduction:

        An increasing number of organizations outsource their data, applications and business processes to the cloud, empowering them to achieve financial and technical benefits due to on-demand provisioning and pay-per-use pricing. However, organizations are still hesitant to adopt cloud services because of security, privacy, and reliability concerns regarding provisioned cloud services as well as doubts about trustworthiness of their cloud service provider. Cloud service certifications (CSC) are good means to address these concerns by establishing trust, and increasing transparency of the cloud market. Cloud service certifications attempt to assure a high level of security and compliance. However, considering that cloud services are part of an ever changing environment, multi-year validity periods may put in doubt reliability of such certifications. We argue that continuous auditing (CA) of selected certification criteria is required to assure continuously reliable and secure cloud services, and thereby increase trustworthiness of certifications. CA of cloud services is still in its infancy and we reveal that most of existing methodologies are not applicable for third party auditing purposes. Therefore, we propose a conceptual CA architecture, and highlight important components and processes that have to be implemented.

Proposed System

         In MultiCloud environment, remote data integrity checking is required to secure user’s data. User will upload file to Cloud. This file is split into blocks using Dynamic Block generation Algorithm and stored in a MultiCloud environment. File Allocation Table (FAT) File System has proper Indexing and Metadata’s for the different Chunks of the Cloud Storage. Here the auditor agrees to inspect logs, which are routinely created during monitoring operations by services providers to assess certification adherence. If Attacker corrupts data in MultiCloud, the continuous auditing process helps the verifier to perform Block level and File level checking for remote data Integrity Checking using Verifiable Data Integrity Checking Algorithm. Cloud provides random blocks to Verifier for Integrity Checking which is to protect user privacy from Verifier (Third Party). File recovery is done by the Verifier automatically if the data gets corrupted during checking. Users can complaint cloud for file recovery. And also we use blockchain for proposed system. We add all the details about auditing record in blockchain for security purpose.

Advantages:

• CPVPA is built on certificate less cryptography, and is free from the certificate management problem.
• The blockchain are time-sensitive, the verification can be time-stamped after the corresponding transaction is recorded into the blockchain, which enables users to check whether auditors perform the verification's at the prescribed time.

Algorithms

• Base64 Algorithm
• Message Digest(MD5)
• Dynamic block generation