A Theoretical Framework for Evaluating Security Risks in Cloud, Edge and Fog Computing

The spread of the distributed computing paradigms such as cloud, edge, and fog computing has made a difference in current information systems architecture. Although each of these technologies provides incredible scalability, low latency, and a greater level of computational efficiency, they also create intricate multi-layered security vulnerabilities that cross through heterogeneous infrastructure environments. The conventional security evaluation strategies that are mainly set to centralised computing paradigms are ineffective in dealing with the dynamic and distributed characteristics of these emerging paradigms. The shared ecosystem between the cloud datacenters, edge nodes, and the fog computing devices introduces attack surfaces that are significantly wider than traditional conceptions of what security measures can encompass, and thus theoretically requires the development of new frameworks to evaluate risks across all tiers of the system. The research paper brings in a cohesive theoretical framework of the systematic assessment of security risks in cloud, edge, and fog computing setups. The main goals include the construction of mathematical models to quantify multi-dimensional security threats, algorithmic solutions to real-time risk evaluation and uniform metric measures for comparative security analysis across heterogeneous distributed computer systems. In the methodology that is proposed to be used, the topologies of distributed computing will be represented using graph theoretical modelling, with Bayesian inference networks to account for probabilistic risk analysis, and machine learning algorithms to adaptively represent and search for threats. The framework combines time analysis on the risk dynamics, space analysis on the extent of danger, and hierarchical modelling on the multitier safety analysis. Next, an in-depth analysis is conducted based on practical deployment on all major cloud platforms, assessment of edge computing testbeds, and implementation of fog computing. The experimental validation results prove that, with diverse distributed computing environments, the framework identification performance is 97.3% precision, and the 94.8% identification performance of security vulnerabilities. The methodology raises the threat detection accuracy by 23 percent compared to the current methods and lowers the false positive rates by 31 per cent. Scalability Performance analysis demonstrates scale to networks with more than 10,000 heterogeneous nodes with real-time assessment capability, which can maintain response times of under a second. The theoretical framework presents a broad base of security risk assessment in the contemporary distributed computing paradigms. The practice allows the proactive security management process, allows the formalisation of the process of risk assessment, and informs the decision-making process regarding infrastructure security investment. The flexibility and scalability of the framework make it an invaluable support in the protection of next-generation distributed computing environments.

Security Risk Assessment, Cloud Computing Security, Edge Computing, Fog Computing

1. P. Mell and T. Grance, "The NIST definition of cloud computing," National Institute of Standards and Technology, NIST Special Publication 800-145, 2011. [Google Scholar] [Crossref]

2. W. Shi, J. Cao, Q. Zhang, Y. Li, and L. Xu, "Edge computing: Vision and challenges," IEEE Internet of Things Journal, vol. 3, no. 5, pp. 637-646, Oct. 2016. [Google Scholar] [Crossref]

3. F. Bonomi, R. Milito, J. Zhu, and S. Addepalli, "Fog computing and its role in the internet of things," in Proc. 1st Edition of the MCC Workshop on Mobile Cloud Computing, 2012, pp. 13-16. [Google Scholar] [Crossref]

4. R. Roman, J. Lopez, and M. Mambo, "Mobile edge computing, fog et al.: A survey and analysis of security threats and challenges," Future Generation Computer Systems, vol. 78, pp. 680-698, Jan. 2018. [Google Scholar] [Crossref]

5. IBM Security, "Cost of a Data Breach Report 2023," IBM Corporation, 2023. [Google Scholar] [Crossref]

6. Flexera, "2023 State of the Cloud Report," Flexera Software LLC, 2023. [Google Scholar] [Crossref]

7. M. Ali, S. U. Khan, and A. V. Vasilakos, "Security in cloud computing: Opportunities and challenges," Information Sciences, vol. 305, pp. 357-383, Jun. 2015. [Google Scholar] [Crossref]

8. K. Hashizume, D. G. Rosado, E. Fernández-Medina, and E. B. Fernández, "An analysis of security issues for cloud computing,"Journal of Internet Services and Applications, vol. 4, no. 1, pp. 1-13, 2013. [Google Scholar] [Crossref]

9. S. Subashini and V. Kavitha, "A survey on security issues in service delivery models of cloud computing," Journal of Network and Computer Applications, vol. 34, no. 1, pp. 1-11, Jan. 2011. [Google Scholar] [Crossref]

10. D. E. Bell and L. J. LaPadula, "Secure computer system: Unified exposition and Multics interpretation," MITRE Corporation, Technical Report MTR-2997, 1976. [Google Scholar] [Crossref]

11. K. J. Biba, "Integrity considerations for secure computer systems," MITRE Corporation, Technical Report MTR-3153, 1977. [Google Scholar] [Crossref]

12. B. W. Lampson, "Authentication in distributed systems: Theory and practice," ACM Transactions on Computer Systems, vol. 10, no. 4, pp. 265-310, Nov. 1992. [Google Scholar] [Crossref]

13. R. M. Needham and M. D. Schroeder, "Using encryption for authentication in large networks of computers," Communications of the ACM, vol. 21, no. 12, pp. 993-999, Dec. 1978. [Google Scholar] [Crossref]

14. J. G. Steiner, C. Neuman, and J. I. Schiller, "Kerberos: An authentication service for open network systems," in Proc. USENIX Winter Conference, 1988, pp. 191-202. [Google Scholar] [Crossref]

15. G. H. Forman and J. Zahorjan, "The challenges of mobile computing," Computer, vol. 27, no. 4, pp. 38-47, Apr. 1994. [Google Scholar] [Crossref]

16. A. Singh and R. Chatterjee, "A comprehensive cloud security assessment framework based on CSA cloud controls matrix," IEEE Transactions on Cloud Computing, vol. 9, no. 4, pp. 1571-1585, Oct. 2021. [Google Scholar] [Crossref]

17. K. Popovic and Z. Hocenski, "Fuzzy logic-based security assessment framework for cloud computing environments," IEEE Access, vol. 10, pp. 45892-45903, 2022. [Google Scholar] [Crossref]

18. R. Roman, J. Lopez, and M. Mambo, "Mobile edge computing, fog et al.: A survey and analysis of security threats and challenges," Future Generation Computer Systems, vol. 78, pp. 680-698, Jan. 2018. [Google Scholar] [Crossref]

19. M. A. Khan and K. Salah, "IoT security: Review, blockchain solutions, and open challenges," Future Generation Computer Systems, vol. 82, pp. 395-411, May 2018. [Google Scholar] [Crossref]

20. Y. Zhang, P. Li, and X. Wang, "Intrusion detection for IoT based on improved genetic algorithm and deep belief network," IEEE Access, vol. 7, pp. 31711-31722, 2019. [Google Scholar] [Crossref]

21. X. Chen and J. Liu, "Adaptive security framework for cloud computing using reinforcement learning," IEEE Transactions on Information Forensics and Security, vol. 17, pp. 2156-2168, 2022. [Google Scholar] [Crossref]

22. D. Basin, C. Cremers, and C. Meadows, "Model checking security protocols," in Handbook of Model Checking, 2nd ed. Springer, 2018, pp. 727-762. [Google Scholar] [Crossref]

23. B. Blanchet, "Modelling and verifying security protocols with the applied pi calculus and ProVerif," Foundations and Trends in Privacy and Security, vol. 1, no. 1-2, pp. 1-135, 2016. [Google Scholar] [Crossref]

24. S. Yi, C. Li, and Q. Li, "A survey of fog computing: Concepts, applications and issues," in Proc. Workshop on Mobile Big Data, 2015, pp. 37-42. [Google Scholar] [Crossref]

25. A. Yousefpour et al., "All one needs to know about fog computing and related edge computing paradigms: A complete survey," Journal of Systems Architecture, vol. 98, pp. 289-330, Sep. 2019. [Google Scholar] [Crossref]

26. J. Hathaliya and P. Tanwar, "An exhaustive survey on security and privacy issues in Healthcare 4.0 with a focus on applications, challenges, and open issues," Sensors, vol. 20, no. 19, p. 551, 2020. [Google Scholar] [Crossref]

27. S. Kumar and B. Singh, "Privacy-preserving security assessment in healthcare cloud using differential privacy," IEEE Journal of Biomedical and Health Informatics, vol. 26, no. 8, pp. 3872-3883, Aug. 2022. [Google Scholar] [Crossref]

28. K. Gai, M. Qiu, and H. Zhao, "Security-aware efficient mass distributed storage approach for cloud systems in big data," in Proc. IEEE 2nd International Conference on Big Data Security on Cloud, 2016, pp. 140-145. [Google Scholar] [Crossref]

29. X. Li and Q. Wang, "Blockchain-based security audit for financial cloud applications," IEEE Transactions on Services Computing, vol. 15, no. 3, pp. 1456-1468, May 2022. [Google Scholar] [Crossref]

30. K. Tange, M. De Donno, X. Fafoutis, and N. Dragoni, "A systematic survey of industrial Internet of Things security: Requirements and fog computing opportunities," IEEE Communications Surveys & Tutorials, vol. 22, no. 4, pp. 2489-2520, 4th Quart. 2020. [Google Scholar] [Crossref]

31. R. Leszczyna, "Cybersecurity and privacy in standards for smart grids - A comprehensive survey," Computer Standards & Interfaces, vol. 56, pp. 62-73, Feb. 2018. [Google Scholar] [Crossref]

32. M. Satyanarayanan, "The emergence of edge computing," Computer, vol. 50, no. 1, pp. 30-39, Jan. 2017. [Google Scholar] [Crossref]

33. L. M. Vaquero and L. Rodero-Merino, "Finding your way in the fog: Towards a comprehensive definition of fog computing," ACM SIGCOMM Computer Communication Review, vol. 44, no. 5, pp. 27-32, Oct. 2014. [Google Scholar] [Crossref]

34. S. Wang, T. Tuor, T. Salonidis, K. K. Leung, C. Makaya, T. He, and K. Chan, "Adaptive federated learning in resource constrained edge computing systems," IEEE Journal on Selected Areas in Communications, vol. 37, no. 6, pp. 1205-1221, Jun. 2019. [Google Scholar] [Crossref]

35. J. Ni, K. Zhang, X. Lin, and X. S. Shen, "Securing fog computing for Internet of Things applications: Challenges and solutions," IEEE Communications Surveys & Tutorials, vol. 20, no. 1, pp. 601-628, 1st Quart. 2018. [Google Scholar] [Crossref]

36. A. Braeken, "PUF based authentication protocol for IoT," Symmetry, vol. 10, no. 8, p. 352, 2018. [Google Scholar] [Crossref]

37. C. Stergiou, K. E. Psannis, B. B. Gupta, and Y. Ishibashi, "Security, privacy & efficiency of sustainable cloud computing for big data & IoT," Sustainable Computing: Informatics and Systems, vol. 19, pp. 174-184, Sep. 2018. [Google Scholar] [Crossref]

38. R. Deng, R. Lu, C. Lai, T. H. Luan, and H. Liang, "Optimal workload allocation in fog-cloud computing toward balanced delay and power consumption," IEEE Internet of Things Journal, vol. 3, no. 6, pp. 1171-1181, Dec. 2016. [Google Scholar] [Crossref]

39. A. V. Dastjerdi and R. Buyya, "Fog computing: Helping the Internet of Things realise its potential," Computer, vol. 49, no. 8, pp. 112-116, Aug. 2016. [Google Scholar] [Crossref]

40. M. Chiang and T. Zhang, "Fog and IoT: An overview of research opportunities," IEEE Internet of Things Journal, vol. 3, no. 6, pp. 854-864, Dec. 2016. [Google Scholar] [Crossref]

41. K. Dolui and S. K. Datta, "Comparison of edge computing implementations: Fog computing, cloudlet and mobile edge computing," in Proc. Global Internet of Things Summit, 2017, pp. 1-6. [Google Scholar] [Crossref]

42. P. P. Jayaraman, A. Yavari, D. Georgakopoulos, A. Morshed, and A. Zaslavsky, "Internet of Things platform for smart farming: Experiences and lessons learnt," Sensors, vol. 16, no. 11, p. 1884, 2016. [Google Scholar] [Crossref]

43. S. Sicari, A. Rizzardi, L. A. Grieco, and A. Coen-Porisini, "Security, privacy and trust in Internet of Things: The road ahead," Computer Networks, vol. 76, pp. 146-164, Jan. 2015. [Google Scholar] [Crossref]

44. A. Al-Fuqaha, M. Guizani, M. Mohammadi, M. Aledhari, and M. Ayyash, "Internet of Things: A survey on enabling technologies, protocols, and applications," IEEE Communications Surveys & Tutorials, vol. 17, no. 4, pp. 2347-2376, 4th Quart. 2015. [Google Scholar] [Crossref]

45. J. Lin, W. Yu, N. Zhang, X. Yang, H. Zhang, and W. Zhao, "A survey on internet of things: Architecture, enabling technologies, security and privacy, and applications," IEEE Internet of Things Journal, vol. 4, no. 5, pp. 1125-1142, Oct. 2017. [Google Scholar] [Crossref]

46. M. A. Al-Garadi, A. Mohamed, A. Al-Ali, X. Du, I. Ali, and M. Guizani, "A survey of machine and deep learning methods for internet of things (IoT) security," IEEE Communications Surveys & Tutorials, vol. 22, no. 3, pp. 1646-1685, 3rd Quart. 2020. [Google Scholar] [Crossref]

47. I. Andrea, C. Chrysostomou, and G. Hadjichristofi, "Internet of Things: Security vulnerabilities and challenges," in Proc. IEEE Symposium on Computers and Communication, 2015, pp. 180-187. [Google Scholar] [Crossref]

48. H. HaddadPajouh, A. Dehghantanha, R. M. Parizi, M. Aledhari, and H. Karimipour, "A survey on internet of things security: Requirements, challenges, and solutions," Internet of Things, vol. 14, p. 100129, Jun. 2021. [Google Scholar] [Crossref]

49. N. Komninos, E. Philippou, and A. Pitsillides, "Survey in smart grid and smart home security: Issues, challenges and countermeasures," IEEE Communications Surveys & Tutorials, vol. 16, no. 4, pp. 1933-1954, 4th Quart. 2014. [Google Scholar] [Crossref]

50. Y. Yang, L. Wu, G. Yin, L. Li, and H. Zhao, "A survey on security and privacy issues in Internet-of-Things," IEEE Internet of Things Journal, vol. 4, no. 5, pp. 1250-1258, Oct. 2017. [Google Scholar] [Crossref]

51. A. Mosenia and N. K. Jha, "A comprehensive study of security of internet-of-things," IEEE Transactions on Emerging Topics in Computing, vol. 5, no. 4, pp. 586-602, Oct. 2017. [Google Scholar] [Crossref]

52. M. Frustaci, P. Pace, G. Aloi, and G. Fortino, "Evaluating critical security issues of the IoT world: Present and future challenges," IEEE Internet of Things Journal, vol. 5, no. 4, pp. 2483-2495, Aug. 2018. [Google Scholar] [Crossref]

53. K. Zhao and L. Ge, "A survey on the internet of things security," in Proc. 9th International Conference on Computational Intelligence and Security, 2013, pp. 663-667. [Google Scholar] [Crossref]

54. D. He, N. Kumar, and J. H. Lee, "Privacy-preserving data aggregation scheme against internal attackers in smart grids," Wireless Networks, vol. 22, no. 2, pp. 491-502, Feb. 2016. [Google Scholar] [Crossref]

55. C. Maple, "Security and privacy in the internet of things," Journal of Cyber Policy, vol. 2, no. 2, pp. 155-184, 2017. [Google Scholar] [Crossref]

56. I. Yaqoob, E. Ahmed, I. A. T. Hashem, A. I. A. Ahmed, A. Gani, M. Imran, and M. Guizani, "Internet of Things Architecture: Recent advances, taxonomy, Requirements, and open challenges," IEEE Wireless Communications, vol. 24, no. 3, pp. 10-16, Jun. 2017. [Google Scholar] [Crossref]

57. O. Nuevo, "Performance measurement and analysis of network traffic in Cloud computing environments," Procedia Computer Science, vol. 160, pp. 195-203, 2019. [Google Scholar] [Crossref]

58. S. Singh, Y. S. Jeong, and J. H. Park, "A survey on cloud computing security: Issues, threats, and solutions," Journal of Network and Computer Applications, vol. 75, pp. 200-222, Nov. 2016. [Google Scholar] [Crossref]

59. K. Gai, M. Qiu, H. Zhao, L. Tao, and Z. Zong, "Dynamic energy-aware cloudlet-based mobile cloud computing model for green computing," Journal of Network and Computer Applications, vol. 59, pp. 46-54, Jan. 2016. [Google Scholar] [Crossref]

60. F. A. Kraemer, A. E. Braten, N. Tamkittikhun, and D. Palma, "Fog computing in healthcare–a review and discussion," IEEE Access, vol. 5, pp. 9206-9222, 2017. [Google Scholar] [Crossref]

61. R. Mahmud, R. Kotagiri, and R. Buyya, "Fog computing: A taxonomy, survey and future directions," in Internet of Everything. Springer, 2018, pp. 103-130. [Google Scholar] [Crossref]

62. P. Hu, S. Dhelim, H. Ning, and T. Qiu, "Survey on fog computing: architecture, key technologies, applications and open issues," Journal of Network and Computer Applications, vol. 98, pp. 27-42, Nov. 2017. [Google Scholar] [Crossref]

63. J. Santos, T. Wauters, B. Volckaert, and F. De Turck, "Fog computing: Enabling the management and orchestration of smart city applications in 5G networks," Entropy, vol. 20, no. 1, p. 4, 2018. [Google Scholar] [Crossref]

64. A. C. Baktir, A. Ozgovde, and C. Ersoy, "How can edge computing benefit from software-defined networking: A survey, use cases, and future directions," IEEE Communications Surveys & Tutorials, vol. 19, no. 4, pp. 2359-2391, 4th Quart. 2017. [Google Scholar] [Crossref]

65. W. Yu, F. Liang, X. He, W. G. Hatcher, C. Lu, J. Lin, and X. Yang, "A survey on the edge computing for the Internet of Things," IEEE Access, vol. 6, pp. 6900-6919, 2018. [Google Scholar] [Crossref]

66. J. Pan and J. McElhannon, "Future edge cloud and edge computing for internet of things applications," IEEE Internet of Things Journal, vol. 5, no. 1, pp. 439-449, Feb. 2018. [Google Scholar] [Crossref]

67. N. Abbas, Y. Zhang, A. Taherkordi, and T. Skeie, "Mobile edge computing: A survey," IEEE Internet of Things Journal, vol. 5, no. 1, pp. 450-465, Feb. 2018. [Google Scholar] [Crossref]

68. T. Taleb, K. Samdanis, B. Mada, H. Flinck, S. Dutta, and D. Sabella, "On multi-access edge computing: A survey of the emerging 5G network edge cloud architecture and orchestration," IEEE Communications Surveys & Tutorials, vol. 19, no. 3, pp. 1657-1681, 3rd Quart. 2017. [Google Scholar] [Crossref]

69. Y. C. Hu, M. Patel, D. Sabella, N. Sprecher, and V. Young, "Mobile edge computing—A key technology towards 5G," ETSI white paper, vol. 11, no. 11, pp. 1-16, 2015. [Google Scholar] [Crossref]

70. P. Mach and Z. Becvar, "Mobile edge computing: A survey on architecture and computation offloading," IEEE Communications Surveys & Tutorials, vol. 19, no. 3, pp. 1628-1656, 3rd Quart. 2017 [Google Scholar] [Crossref]

• “Next-Generation Cybersecurity Through Blockchain and AI Synergy: A Paradigm Shift in Intelligent Threat Mitigation and Decentralised Security”
• Forensic Payroll Analytics for IPPIS: A Hybrid Anomaly-Detection Framework to Expose Payroll Fraud, Improve Data Governance, and Protect Employee Rights
• Factors Influencing Data Protection on Global Trade
• Development Of Artificial Intelligence-Based Model for Forensic Analysis of Cross-Platform Deepfakes
• Cyber Threats and Nigeria’s National Security: Assessing the Role of Regional Cooperation in West Africa