Authentication, authorization, and data access control are playing major roles in data security and privacy. The proposed model integrated the multi-factor authentication–authorization process with dependable and non-dependable factors and parameters based on providing security for tenants through a hybrid approach of fully homomorphic encryption methodology: the enhanced homomorphic cryptosystem (EHC) and the Brakersky–Gentry–Vaikuntanathan (BGV) scheme. This research was composed of four major elements: the fully homomorphic encryption blended schemes, EHC and BGV; secure token and key implications based on dependable and don-dependable factors; an algorithm for generating the tokens and the suitable keys, depending on the user’s role; and the execution of experimental test cases by using the EHC algorithm for key and token generation, based on dependable and non-dependable parameters and time periods. The proposed approach was tested with 152 end-users by integrating six multi-tenants, five head tenants, and two enterprise levels; and achieved a 92 percent success rate. The research integrated 32-bit plain text in the proposed hybrid approach by taking into consideration the encryption time, decryption time, and key generation time of data transmission via cloud servers. The proposed blended model was efficient in preventing data from ciphertext attacks and achieved a high success rate for transmitting data between the multi-tenants, based on the user-role-user type of enterprise cloud servers.

This research paper puts emphasis on using cloud computing with Blockchain (BC) to improve the security and privacy in a cloud. The security of data is not guaranteed as there is always a risk of leakage of users’ data. Blockchain can be used in a multi-tenant cloud environment (MTCE) to improve the security of data, as it is a decentralized approach. Data is saved in unaltered form. Also, Blockchain is not owned by a single organization. The encryption process can be done using a Homomorphic encryption (HE) algorithm along with hashing technique, hereby allowing computations on encrypted data without the need for decryption. This research paper is composed of four objectives: Analysis of cloud security using Blockchain technology; Exceptional scenario of Blockchain architecture in an enterprise-level MTCE; Implementation of cipher-text policy attribute-based encryption (CP-ABE) algorithm; Implementation of Merkle tree using Ethereum (MTuE) in a Multi-tenant system. Out of these four objectives, the main focus is on the implementation of CP-ABE algorithm. CP-ABE parameters are proposed for different levels of tenants. The levels include inner tenant, outer tenant, Inner-Outer-Tenant, Inner-Outer-External-Tenant, Outer-Inner-Tenant, External-Outer-Inner-Tenant and the parameters such as token, private key, public key, access tree, message, attribute set, node-level, cipher-text, salting which will help in providing better security using CP-ABE algorithm in a multi-tenant environment (MTE) where tenants can be provided with different levels of security and achieved 92 percentage of authenticity and access-control of the data.

The vulnerability analysis and scanning are playing a major key role in the evolution of network and cyber security for analyzing the weakness of data entry points while the data is transmitted from enterprise to cloud and cloud to enterprise. The vulnerability scan and analysis are very important to the enterprise for identifying their networking faintness, attacker-back doors, and router logs. The vulnerability scanning methods will be accomplished by the enterprise IT team and third-party security service provided with the implications of auditing and authentication rules. The insider threats and attacks can pretense a real defense risk to the various internal multi-tenants of various enterprises and companies. This paper has been composed of three major objectives as Analysis of insider attacking types along with their implications by the supporting attributes matrices; Description of prevention methods of insider attacks and threats; Execution of test-cases for avoiding various vulnerabilities and insider attacks. It has analyzed the risk factors which impacted based on enterprise-level roles, vulnerability type and supporting parameters for committing an inside attack. This research has described the efficient security scenario to avoid or reduce the vulnerabilities and insider attacking complexities. This research has explored the enterprise-level vulnerability scanning methods and process, which is more helpful for the cyber security learners for gaining in-depth knowledge of various device, network and operating system-based vulnerabilities and their supporting application-level affected files. The proposed methodology is evaluated using different operating systems framed with different VS models and test cases experimented, tested on various enterprise level centric servers with integration of eight multitenants, four head-tenants along with 152 end-users and achieved a 92 percent of success rate. Test cases are executed based on the type of attacks and threats with the vulnerability model for analyzing the nature of the attack, its cause, the region of the attacks and the data leakage percentage. This research is more helping the enterprise-level cyber security experts and managers to reduce the various vulnerabilities with relevant insider attacks by building an efficient monitoring intelligent system.

The cross platform UX/UI designs, frameworks will attain the targeted spectators rapidly since they are well-suited with numerous operating systems and devices. The greater part of the startup enterprises find it suitable due to its quick progress and turnaround time. The cross-platform UX/UI designs, frameworks are indisputably not only efficient and less unwieldy but beneficial in provisions of time-period, money and efforts. The recent cross platform development and UX/UI design core component based mobile app are involved, synchronized with thousands of third-party or non-third-party libraries which permit the web-developers to rapidly compose-build-deploy the web-applications and websites. The third-party libraries make available to the developers with the exceptional opportunities to incorporate reusable, pre-analyzed-tested software applications which save development of expansion-time, manpower, investment of infrastructure and cost, it allows the developers to focus on the core-components and features of the applications that matter to clients and end-users. But, most the third-party or non-third-party libraries are a source of security threats as vulnerability in one library can compromise an entire server. This research paper proposing integrating of rule based secure parameters for analyzing third-party applications and libraries in cross platform development. The integration of rule based secure parameters chains an effortless deployment of web hardening methods and access control the rule based parameters on interactions between libraries and their local cum global environment, including any dependent library. This research included various end-users, client based decision making-indicators with supporting affecting factors and data matrices which helps to take the accurate decisions to avoid or block unwanted libraries and plug-ins. This analytical research has experimented with more than five web environments by rule based secure parameters, affecting factors along with supporting data matrices.