Work

Security vulnerabilities and enhancement of a dynamic auditing scheme for regenerating code-based storage in cloud-fog-assisted IIoT

Year: 2025

Type: article

Abstract: In a recent publication, Liu et al. put forth a privacy-preserving dynamic auditing scheme for distributed encoded storage systems in cloud-fog-assisted Industrial Internet of Things (IIoT) [Internet of Things, DOI: 10.1016/j.iot.2024.101084]. Each encoded data segment utilizes the ZSS signature for the creation of its corresponding authentication tag. The fog server will be challenged and subjected to rigorous verification through the utilisation of a bilinear pairing map. In this paper, we demonstrate that the security vulnerabilities of Liu et al.’s scheme by mounting a block forgery attack and an identifier forgery attack, respectively. In particular, an adversarial fog server is capable of successfully deceiving the proxy auditor through the implementation of arbitrary unauthorised data tampering or identifier impersonation. We also provide an alternative scheme to address the security weaknesses, and highlight the challenges of cloud data auditing tailored for cloud fog-enabled IIoT.

Source: Journal of Parallel and Distributed Computing

DOI: 10.1016/j.jpdc.2025.105185

Authors: Guangjun Liu, Jinbo Xiong, Ximeng Liu, Xiang Zou, Chenghu Ke, Zengfa Dou

Institutions: Xi’an University, Fuzhou University, Fujian Normal University

Language: English

Topic: Cloud Data Security Solutions

Subfield: Information Systems

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

Estimated APC paid: $3,250

Funders: National Natural Science Foundation of China, Natural Science Basic Research Program of Shaanxi Province