Abstract
‘Cloud’ is one of the most popular buzzwords rampant in today’s technology dependent world. Data is the new currency of today’s world. It does not matter whether it belongs to a user at home or a large corporation. Both need to be protected. Due to the ease of use and the cost advantages provided by the use of Cloud Storage services, this type of data storage is becoming more prevalent by the day as means of storing data, automatically backing up data and also sharing data, if needed, amongst other users. Additionally, by this system of data storage, clients are no longer required to maintain or set up access with regard to the required hardware and service. Instead, all the resources are available on the web. We still see some diffidence among organizations to venture into the Cloud despite the potential savings in infrastructure and improvements in business flexibility because security is still a major source of worry for the customers. Understanding this key issue, major Cloud Storage providers are taking measures to keep their customers’ data secure. The objective of this project is to explore different security threats that customers are concerned about cloud and possible solutions to counteract them. We have also taken the different easy to use and convenient security features supported by cloud providers into consideration, when setting up the scope of the project related implementation. The main cloud providers and its services used here are Google App Engine for Business, Amazon Web Service and Single Sign-on feature offered by OneLogin. The web application has been built on both Amazon Web Service (AWS) and Google app Engine (GAE) using Eclipse IDE. Programming languages like Java, JavaScript and jQuery are used here to set up a dynamic UI and also to retrieve data from non-relational cloud databases. The web applications deployed on GAE and AWS uses non-relational (also known as NoSQL) databases Google Data Store and Simple DB, respectively, to store the data related to the corresponding application. The implementation portrayed a Cloud service facilitated by security features to authenticate and authorize users using OAuth, SSL (to transfer data securely between the client and cloud) and SAML.