Cloud storage is a service model that involves the transmission and remote storage of data on external storage systems. This data is securely backed up and managed on these remote servers, allowing users to access it over a network, typically the internet. Users subscribe to cloud storage services and are billed periodically, often on a monthly basis, based on the amount of storage they consume1,2. These cloud storage providers offer a convenient and scalable solution for individuals and businesses to store and access their data, without the need for on-premises hardware and infrastructure3. The digital era has ushered in a transformative age of data management, where the cloud, an intricate network of interconnected computers, has taken center stage4. Cloud storage stands as a fundamental element in the ongoing technological transformation, granting users the capability to securely store and retrieve their data from any location equipped with an internet connection. It is a virtual repository that spans across a multitude of physical storage devices, empowering individuals and organizations alike to harness the power of remote data storage. Leading technology companies such as Apple, Microsoft, Google, and many others have ventured into this realm, providing users with the convenience of cloud-based storage solutions5. This innovation has brought about unparalleled levels of accessibility, flexibility, and scalability. IThas also introduced a complex landscape of challenges, most notably pertaining to the security and privacy of sensitive data. In this digital landscape, data has become a valuable asset, and protecting it has become paramount4. With essential services increasingly entrusted to third-party cloud storage providers, ensuring the confidentiality, integrity, and availability of data has become a multifaceted challenge. Privacy concerns, regulatory compliance, and the evolving threat landscape have made the evaluation of cloud storage services a critical endeavor. This paper delves into the realm of cloud storage, specifically focusing on the security and privacy aspects of popular cloud storage providers. By conducting a comprehensive analysis, we aim to shed light on the critical considerations users and organizations should take into account when entrusting their data to these platforms. Through an exploration of various criteria, including secure collaboration, compliance, governance, and data security, we seek to provide insights into the strengths and weaknesses of different cloud storage services. As we embark on this journey through the cloud, it becomes increasingly evident that safeguarding personal and sensitive data is of paramount importance. The evolving landscape of technology and the dynamic nature of cyber threats require a thorough understanding of the security measures and privacy safeguards offered by cloud storage providers. This paper endeavors to equip readers with the knowledge needed to make informed decisions and navigate the intricate terrain of cloud storage in an era where data privacy and security stand as pillars of the digital age. In this paper, we present the characteristics of security for four Cloud Storages: Sync, pCloud, IceDrive and Egnyte by using their properties in terms of privacy and personal data. We define the model that we used to analyze cloud storages. By using these models, we start our research to obtain the results. Here we give one detailed analysis of comparison of cloud storages in terms of privacy. We finish the paper with conclusions.
Cloud storages and their properties
The term "cloud computing" emerged relatively recently in the information technology (IT) industry, but it has deep roots in decades of innovation in areas such as virtualization, utility computing, distributed computing, networking, and software services6. The concept of a cloud represents an IT environment meticulously designed to offer scalable and precisely measured resources from a remote location, Table 1. Over time, it has evolved into a contemporary paradigm for information exchange and the delivery of internet-based services7. This evolution has led to the provision of more secure, adaptable, and scalable services for consumers, effectively operating as a service-oriented architecture that minimizes end-user administrative burdens3.
Table 1. Characteristics of cloud storage.
| Characteristics of cloud storage |
|---|
| SaaS | services are offered as a web application and consumers are able to access services at any time and from any place |
| IaaS/HaaS | Consumer receives: storage, Virtual machine, network in virtualized form and build their infrastructure on them |
| PaaS | consumers receive hosted applications according to API programming frameworks and deploy systems in them |
At its most basic level, cloud storage can be as simple as a single user gaining access to a single server. In this scenario, a user uploads their data through a terminal and stores it on the server for safekeeping. However, if the server were to encounter a malfunction, retrieving the data files would be an insurmountable challenge until the server is back online8. Cloud storage addresses this vulnerability through the principles of redundancy and replication, ensuring data availability and durability5.
Sync. Sync.com is a comprehensive file-sharing and collaboration solution tailored for small and medium-sized businesses. This platform encompasses collaboration features, data backup, and recovery tools all in one package. It offers the flexibility of both cloud-based and on-premises deployment options and provides mobile apps compatible with Android and iOS devices for seamless accessibility.
One of Sync.com's notable features is its robust access control, enabling users to tightly manage shared documents. This control extends to setting passwords, defining expiration dates, monitoring uploads, and receiving email notifications about document interactions9.
A standout aspect of Sync.com is its unwavering commitment to data security through zero-knowledge encryption. This means that your data remains perpetually safe, secure, and private. Furthermore, Sync.com's secure cloud storage complies with a wide array of data privacy regulations in the United States, Canada, and the European Union, including Health Insurance Portability and Accountability Act (HIPAA), Personal Information Protection and Electronic Document Act (PIPEDA), and EU-safeguard standards. Users can exercise granular control over access permissions, whether read-only or read-write, adding an extra layer of security10.
Sync.com offers valuable data backup and recovery capabilities, allowing users to restore documents to earlier versions. This feature provides a crucial safety net in cases of virus or ransomware attacks, as well as accidental deletions. According to their Terms of Service as of May 12, 2021, retrieved from Sync's official website on June 17, 2022, this functionality offers a valuable lifeline for data recovery. Additionally, Sync.com introduces Fault Storage, allowing users to seamlessly archive documents to the cloud directly from their system or hardware storage, enhancing data management and accessibility11. The criteria selected for evaluating cloud platforms, namely "Secure Collaboration," "Compliance, Governance, and Privacy," and "Data Security," are crucial aspects that organizations consider when adopting cloud services. These criteria collectively address key concerns related to the confidentiality, integrity, and availability of data on cloud platforms. By focusing on secure collaboration, compliance, governance, and data security, organizations can make informed decisions about which cloud platform aligns best with their security and operational requirements. Additionally, these criteria align with industry best practices and standards for cloud security, making them widely recognized and accepted in the field.
The obtained results for Sync Storage according to Secure Collaboration criteria are presented on Table 2.
Table 2. Secure Collaboration on Sync.
Secure
Collaboration |
|---|
Secure
Collaboration | - User Authentication
- Two-factor Authentication
- End-to-end encryption
- AES-256 bit encryption
- Password protected
- SSL/TLS encryption
- Client-Side Encryption
- Virtual Private Network |
The obtained results for Sync Storage according to compliance, governance, and privacy criteria are presented on Table 3.
Table 3. Compliance, governance, and privacy on Sync.
| Compliance, Governance, and Privacy |
|---|
Compliance,
Governance, and
Privacy | Sync data governance workflow covers all stages of the content lifecycle:
● Define
○ Identification: Recognize the types of data requiring governance.
○ Protection Levels: Determine the appropriate level of safeguarding for each data type.
○ Storage and Retention Policies: Establish policies for storage duration and retention.
○ Ownership: Clearly define data ownership responsibilities.
● Control
○ Data Protection Policies: Develop and enforce policies for safeguarding data.
○ Access Controls: Implement access controls to regulate who can access data.
○ Monitoring: Continuously monitor data usage and activities.
○ Activity Detection: Employ mechanisms to detect and track data-related activities.
○ Rules: Set rules for creating, storing, and sharing data.
○ Roles and Responsibilities: Define roles and assign responsibilities for data governance.
● Alert
○ Alert Configuration: Configure alerts for detecting unusual or suspicious activities.
○ Response: Act upon alerts promptly.
○ Policy Review: Regularly review and update data governance policies.
● Monitor
○ Usage Monitoring: Continuously monitor data usage and user activities.
○ Incident Response: Be prepared to respond effectively to data-related incidents.
● Protect
○ Security Measures: Implement robust security measures to safeguard data.
○ Encryption: Utilize encryption techniques to protect data in transit and at rest.
○ Incident Response Plans: Establish comprehensive incident response plans to address
data breaches and security incidents effectively. |
The obtained results for Sync according to Terms of Service as of May 12, 2021, retrieved from Sync's official website on June 17, 2022 cloud storage according to data security criteria are presented on Table 4.
Table 4. Data security on Sync.
Data
Security |
|---|
Data
Security | ● Comprehensive end-to-end encryption, SOC 2 (Service
Organization Control Type 2) Type 1 certification
● Absence of third-party tracking
● Adherence to HIPAA compliance standards
● Alignment with GDPR compliance requirements
● Conformance with PIPEDA compliance regulations |
PCloud. pCloud is a personal cloud storage service that allows us to save our files and folders. The software is compatible with nearly all devices and operating systems (iOS, Android, MacOS, Windows, and all Linux distributions). The application generates a secure virtual drive, allowing us to increase our local storage capacity. Every change we make to our pCloud platform will be immediately visible on other pCloud-connected devices. We have direct file access to any update and all of our devices are instantaneously synchronized12.
The obtained results for pCloud Storage according to Secure Collaboration criteria are presented on Table 5.
Table 5. Secure collaboration on pCloud.
| Secure Collaboration |
|---|
Secure
Collaboration | - User Authentication properties
- Two-step Login Verification properties
- Verification
- TLS/SSL encryption
- Encryption in Transit
- Password protected
- Private Key Encryption
- Client-Side Encryption
- Swiss Data Protection |
The obtained results for pCloud Storage according to compliance, governance, and privacy criteria are presented on Table 6.
Table 6. Compliance, governance, and privacy on pCloud.
| Compliance, Governance, and Privacy |
|---|
Compliance,
Governance,
and Privacy | The data governance workflow within pCloud encompasses every phase
of the content lifecycle:
● Authentication
○ User authentication
○ Two-step Login Verification
○ Make secure connection over internet using TLS/SSL encryption
● Define
○ Level of access in data
○ Access management and control
○ Data encryption
○ Classification of data
● Alert
○ Unknown device
○ Limited internet connection
○ Public line of connection
○ Scan for viruses |
The obtained results for IceDrive Cloud Storage according to Data Security criteria are presented on Table 7.
Table 7. Data security on pCloud.
Data
Security |
|---|
| Data Security | GDPR (General Data Protection Regulation)
ISO 9001:2015 certification
ISO 27001:2013 certification
SSAE 18 SOC 2 Type II compliance
SSAE 16 SOC 2 Type II compliance |
IceDrive. IceDrive is a cloud storage, focused on privacy and security. Its main selling point is its hermetic encryption with zero knowledge13. Almost all devices and operating systems are compatible with the program (Windows, Mac, and Linux) there is a desktop app, mobile (Android and iOS) devices can access mobile apps but only Windows users can utilize a virtual disk14. Activities you would need to carry out on files—edit, delete, and upload—feel equally quick for files. Icedrive provides real-time file synchronization15.
The obtained results for IceDrive Cloud Storage according to secure collaboration criteria are presented on Table 8.
Table 8. Secure collaboration on IceDrive.
Secure
Collaboration |
|---|
| Secure Collaboration | User Authentication
Twofish protocol
Zero-knowledge encryption
two-factor authentication |
The obtained results for IceDrive Cloud Storage according to compliance, governance, and privacy criteria are presented on Table 9.
Table 9. Compliance, governance, and privacy on IceDrive.
Compliance,
Governance,
and Privacy |
|---|
| Compliance, Governance, and Privacy | IceDrive's data governance workflow encompasses every phase of the content lifecycle:
● Control
○ Control over personal data access to add and delete or even delete the account completely
○ Classification of sensitive data
● Define
○ Access & Content Sharing Controls
○ Access management and control
○ Data protection
● Alert
○ Stay on Top of Issues
▪ Limited support options
▪ External Links
▪ Customer Support
▪ Restricted Collaboration |
The obtained results for IceDrive Cloud Storage according to Data Security criteria are presented on Table 10.
Table 10. Data Security on IceDrive.
| Data Security |
|---|
Data
Security | Twofish Encryption
Client-side Encryption
Zero-knowledge Encryption |
Egnyte. Egnyte stands as an enterprise-level file sharing and collaboration solution, enabling users to securely access, share, and collaborate with colleagues and partners from various devices16. It seamlessly blends the key attributes of security, scalability, and control for IT administrators, while simultaneously offering an intuitive file sharing experience for end-users.
Egnyte's distinct advantage lies in its ability to provide enterprise-grade file sharing without the risks associated with unauthorized cloud providers, the complexities of VPN setups, or vulnerabilities in security17. It ensures optimal performance within office environments while facilitating powerful collaboration across different devices18.
Egnyte's infrastructure adopts a hybrid approach, which establishes a secure environment for users to generate and store files in the cloud. Data is securely housed within SOC2-certified data centers, and it can be augmented by on-premises infrastructure19. This hybrid setup ensures uninterrupted access, even in low-bandwidth scenarios, guaranteeing data availability and continuity for users20.
The obtained results for Egnyte Cloud Storage according to Secure Collaboration criteria are presented on Table 11.
Table 11. Secure Collaboration on Egnyte.
| Secure Collaboration |
|---|
Secure
Collaboration | ● User Authentication: Ensuring secure user identification and access.
● Two-Step Login Verification: Adding an extra layer of security for user logins.
● Login Credentials Password Policy Management: Enforcing password policies to enhance login security.
● Active Directory/LDAP/Single Sign-On Integration: Streamlining user management by integrating with these
authentication systems.
● Roles-Based Administration: Assigning specific roles and permissions to users based on their responsibilities.
● Repository Permissions: Controlling access to data repositories with granular permissions.
● Encryption in Transit: Safeguarding data during transmission over networks.
● Encryption at Rest: Protecting data while it's stored on servers or in the cloud.
● Egnyte Object Store File Encryption and Key Management: Ensuring encryption and secure key management for
files stored in Egnyte's Object Store.
● Application & Data Vulnerability Detection: Identifying and addressing vulnerabilities in both applications and
data to enhance overall security. |
The obtained results for Egnyte Cloud Storage according to Compliance, Governance, and Privacy criteria are presented on Table 12.
Table 12. Compliance, Governance, and Privacy on Egnyte.
| Compliance, Governance, and Privacy |
|---|
Compliance,
Governance,
and Privacy | Egnyte's data governance workflow comprehensively addresses every phase of the content lifecycle:
● Discover
○ Automate Sensitive Data Classification
● Define
○ Access & Content Sharing Controls
○ Permissions Browser
○ Content Safeguards
● Remediate,
○ Address and Resolve Issues
○ Ransomware
○ Behavioral Analytics
● Alert
○ Stay on Top of Issues
▪ Unusual Access
▪ Compromised Accounts
▪ Ransomware Infection
▪ Public Link
▪ Open Access
▪ External Sharing
▪ Report,
▪ Share Progress & Support Regulatory Compliance
▪ Audit Reports
▪ Responding to Requests for Personal Data
● Retire
○ Delete or Archive Stale Data
○ Minimize Your Data, Minimize Your Risk |
The obtained results for Egnyte Cloud Storage according to Data Security criteria are presented in Table 13.
Table 13. Data Security on Egnyte.
| Data Security |
|---|
Data
Security | SOC 2: Demonstrating adherence to high standards of security, availability, processing integrity, confidentiality, and privacy.
ISO 27001: Certifying its robust information security management system.
Financial Services: Meeting the stringent compliance requirements specific to the financial sector.
Healthcare: Complying with healthcare industry standards to secure sensitive patient information.
EU Customers: Addressing the specific needs and regulations relevant to European Union customers. |
The evolution of cloud computing has provided scalable, flexible, and secure services for consumers, enhancing information exchange and internet-based services. Cloud storage is achieved through redundancy and repetition concepts, ensuring data safety even in server malfunctions. Secure Collaboration on Sync - Tailored for the needs of small and medium-sized businesses, it provides a comprehensive suite encompassing collaboration, data backup, and recovery solutions. Its features include user authentication, two-factor authentication, end-to-end encryption, AES-256 bit encryption, password protection, SSL/TLS encryption, client-side encryption, and virtual private networks.
Compliance, Governance, and Privacy on Sync - Sync.com's data governance workflow covers data classification, access controls, monitoring, alert setup, and incident response, ensuring compliance with data privacy regulations such as HIPAA, PIPEDA, and EU safeguards.
Data Security on Sync- Sync.com boasts end-to-end encryption, SOC 2 Type 1 compliance, no third-party tracking, HIPAA, GDPR, and PIPEDA compliance.
pCloud is a personal cloud storage service compatible with various devices and operating systems. It offers secure collaboration features, including user authentication, two-step login verification, TLS/SSL encryption, encryption in transit, password protection, private key encryption, client-side encryption, and Swiss data protection.
Compliance, Governance, and Privacy on pCloud - pCloud's data governance workflow includes access management, data encryption, and alert setups.
Data Security on pCloud - Complies with a range of stringent standards, including GDPR, ISO 9001:2015, ISO 27001:2013, SSAE 18 SOC 2 Type II, and SSAE 16 SOC 2 Type II, ensuring the highest levels of data security and quality management.
IceDrive - emphasizes privacy and security, supporting multiple devices and operating systems. Its features include Twofish protocol, zero-knowledge encryption, two-factor authentication, and real-time file synchronization.
Compliance, Governance, and Privacy on IceDrive - IceDrive's data governance workflow covers data control, access management, data protection, and alert setups.
Data Security on IceDrive - ensures data security through Twofish encryption, client-side encryption, and zero-knowledge encryption.
Egnyte provides enterprise-grade file sharing and collaboration capabilities within a hybrid infrastructure. It prioritizes security in collaboration through features such as user authentication, two-step login verification, password policy management, integration with active directory/LDAP/single sign-on, and robust encryption measures for data both in transit and at rest.
Compliance, Governance, and Privacy on Egnyte-Egnyte's data governance workflow covers data discovery, access controls, issue remediation, alerting, and data retirement.
Data Security on Egnyte - maintains compliance certifications like SOC 2, ISO 27001, and serves various sectors, including financial services, healthcare, and EU customers.
