A Hybrid Framework to Improve Data Security in Cloud Computing

Cloud computing is defined as the management and provision of resources, software, applications, and information as services over the internet. Numerous organizations are adopting cloud services because of the economy and technology changes. Over the past year, cloud computing has made life easier for other people or organizations by allowing people to have access to information from anywhere in the world through the internet. However, cloud computing introduces a series of security concerns, which data security is a major concern. Data security is basically linked with any security in the cloud. If the network or infrastructure security is compromised, the possibility there is a possibility of data being affected. Data security has three important principles that are Confidentiality, Integrity, and Availability (CIA) that needs to always be maintained. Understanding the security concerns in cloud computing is an important requirement for those who are planning to move to the cloud solution. Thus, this paper aims to investigate and develop a hybrid data security framework to mitigate data security challenges in the cloud, focusing on legal frameworks such as POPIA and GDPR. A survey was conducted to investigate which techniques are more effective in protecting data and the evaluation ensured that CIA triads are covered. The limitation on the existing techniques is that they address only one principle or two, but not all three at the same time. The best technique among the others will be used integrated when designing the proposed framework in order to address CIA. Having more than one security technique to address data security will improve the security in the cloud and will also bring more business to cloud service providers when customers see the security in data enhanced.