This document summarizes a cloud storage solution implemented using the OwnCloud application that includes an enhanced security algorithm called "The Mist". The Mist requires users to correctly answer one randomly selected security question out of three they created along with the correct answer selected from 50 choices within 16 seconds to gain access to their account. The solution was customized for and implemented at Southeastern University to provide secure cloud storage for the university using the latest enterprise-grade virtualization and server technologies.

1. The Mist: Securing Cloud Storage
Dinesh Devkota1 Travis McAdams2
Dr. Ihssan Alkadi3 Dr. Ghassan Alkadi4 Dr. Theresa Beaubouef5
In the past, people would run applications on their local
machines, with data stored in same physical location. Today,
people are moving to “the cloud” to run those application and
store their data. Since data is valuable, security is essential in a
world where one’s data is stored in the public domain. It is
important to be aware of the physical locations where data is
stored and the laws that impact rights to that data.
http://scale.wpengine.netdna-cdn.com/wp-content/uploads/2013/05/ILLUST_Cloud_Syncing_0723-1024x869.png
• What if a copy of your data is located in a region where the
government is overthrown?
• How secure would your data become?
• What impact could theft and loss of this data have in your
life?
We have implemented a cloud storage solution using the
latest cloud technologies for today’s enterprise. This solution
supports a security algorithm called “The Mist”.
Introduction
Traditionally, people are provided with email verification,
phone verification, and security questions as verification for
resetting forgotten passwords. “The Mist” implements an
enhanced security question verification algorithm that allows
users access to their accounts and data.
• Each user creates three security questions and answers.
• Authentication with “The Mist”:
• One of the three questions is displayed.
• The answer is displayed along with 49 other choices.
• The user must choose the correct answer within 16
seconds to gain access to his account.
After initial setup of the system, we started with
customization, development, and implementation of “The
Mist” security algorithm.
This included understanding the OwnCloud application and
reverse engineering parts of the application for proper
implementation.
The OwnCloud system is built using the MVC design pattern
where the request-handling, logic, and views are separated in
the system.
We have modified the logic and views:
1. Allows user to choose three security questions and
answers.
2. This data is stored in the system database and linked to the
user.
3. The Mist security algorithm is then available as an
authentication method to the user.
Objectives
Due to the popularity of cloud services, it is essential that
client data be secured. As technology changes, security
algorithms must continually evolve to protect personal and
sensitive data stored in the cloud. We hope that this project
evolves to serve as secure cloud storage for Southeastern. We
also look forward to future
development of “The Mist”
security algorithm, incorporating
improvements and developing
related algorithms. http://www.transitionaldata.com/sites/transitionaldata.com/files/images/cloudsecurity.jpg
Conclusions
• Implement a “self-hosted” cloud storage solution for
Southeastern.
• Customize this solution for Southeastern.
• Develop and implement “The Mist” security algorithm.
• Prepare this solution to possibly become a campus-wide
service for all Southeastern students and faculty.
• Build this solution on a the latest enterprise grade
hardware and software infrastructure.
The Mist Security Algorithm
Dinesh Devkota1 dinesh.devkota@selu.edu
Travis McAdams2 travis.mcadams@selu.edu
Dr. Ihssan Alkadi3 ialkadi@selu.edu
Dr. Ghassan Alkadi4 galkadi@selu.edu
Dr. Theresa Beaubouef5 tbeaubouef@selu.edu
Thanks to the Office of Technology at Southeastern and the following technologies:
*Logos are property of their corporations and/or companies and in no way imply an endorsement of this project.
Acknowledgements & Contact
braveheart.selu.edu
We utilized VMware's virtualization platform in concert with
an enterprise grade server to meet our goals of building this
solution on the latest enterprise software and hardware
infrastructure.
• Hardware:
• Dell PowerEdge Server
• RAID 1 Data Store
• Hypervisor:
• VMware ESXi 5.5.0
• OS:
• Debain 7.2 (Wheezy)
• Apps:
• Apache http://cdn3.techworld.com/cmsdata/products/3230674/VMware_Stack.PNG
• MySQL
• OwnCloud
Technology & Implementation