EICIDS-elastic and Internal Cloud-based Detection System.

Josenilson Dias Arujo; Dhileanede Andrade Rodrigues; Leonardo Silvade Melo; Zair Abdelouahab

Author(s)

Josenilson Dias Arujo Federal University of Maranhao-UFMA, Brazil

Dhileanede Andrade Rodrigues Federal University of Maranhao-UFMA, Brazil

Leonardo Silvade Melo Federal University of Maranhao-UFMA, Brazil

Zair Abdelouahab Federal University of Maranhao-UFMA, Brazil

Abstract

The elasticity and abundant availability of computational resources are attractive to intruders exploit cloud vulnerabilities and were able to launch attacks against legitimate users to gain access to private and privileged information. The Intrusion Detection Systems are presented as a possible solution for protection; however, to effectively protect the cloud users, IDS should have the ability to expand rapidly by increasing or decreasing the amount or sensors, the measure of cloud resources are available, and isolating the access to infrastructure and the system levels. Protection against internal threats should also be planned, as most protection systems do not identify them correctly. In order to solve these problems, we present the EICIDS - Elastic and Internal Cloud-based Intrusion Detection System, which monitors the internal cloud environment, entering data capture sensors on the local network of user´s VMs, and therefore, able to detect suspicious behavior of users. For this, the EICIDS uses the characteristics of virtual machines such as fast boot, fast recovery, stop or pause of VM, migrate between different hosts and execution across multiple platforms, to monitor and protect the cloud computing environment and keep up with the growth or reduction cloud, in order to save resources.

Publication Details

Page(s) 34-49

DOI DOI not available

Published Journal: International Journal of Communication Networks and Information Security, Volume: 7, Issue: 1, Year: 2015

Request the full text from PASTIC

Keywords

elasticity, internal threats, virtual machines, intrusion detection

References

B.Kodada,P.Gaurav,R.Alwyn, .,Pais. "Protection -

N.Jeyanthi,N.Iyengar, 2012."Packet resonance strategy: a spoof attack detection and prevention mechanism in cloud computing environment.",International Journal of Communication Networks and Information Security (IJCNIS) 4 163 -173

N.Iyengar,B.Arindam,G.Gopinath, 2014."A Fuzzy Logic Based Defense Mechanism against Distributed Denial of Services Attack in Cloud Environment.",International Journal of Communication Networks and Information Security (IJCNIS) 6 233 -245

Movaghar and F.,Sabahi, 2008.Intrusion detection: A survey,” In Systems and Networks Communications, 08 23 -26

F.Sousa,L.Moreira, 2009.Computação em nuvem: Conceitos, tecnologias, 150 -175

P,Mell,T.Grance, 2009.,The NIST Definition of Cloud Computing. National Institute of Standards and Technology 53 50 -

F.Armand, 2009.Above the clouds: A berkeley view of cloud computing,” Dept . Electrical Eng and Comput, 28 13 -

L.Vaquero, 2008.A break in the clouds: towards a cloud definition,” ACM SIGCOMM Computer Communication Review, 39 50 -55

M.Laureano,C.Maziero,E. Jamhour., 2003.,São José dos Campos 1 -7

D.García, 2009."Anomaly -based network intrusion detection : Techniques, systems and challenges,",in: Elsevier Computers & Security 28 18 -28

J.Allen, 1999.State of the practice of intrusion detection technology, -

L.Christiane, 2002.,Master Thesis -

R.Bace,P.Mell, 2001., -

T.Alharkan,P.Martin, 2012."IDSaaS : Intrusion Detection System as a Service in Public Clouds," Cluster , Cloud and Grid Computing ( CCGrid, 686 13 -16

D.Robinson, .Learn how Amazon EC2 , S3 , SimpleDB and SQSWeb Services Enables you to reach business goals faster,” Emereo Pty Ltd, 20 -180

K.Vieira, 2010."Intrusion Detection for Grid and Cloud Computing,",IT Professional 38 -

S.Dhage, 2011.-,Technology ( ICWET 235 -239

H.Kholidy,F.Baiardi, 2012."CIDS: A Framework for Intrusion Detection in Cloud Systems,",Information Technology: New Generations (ITNG) 379 16 -18

S.Roschke,C.Feng,C. Meinel. “, 2009.An extensible and compatible virtualization IDS management architecture,”,In: Fifth international conference on information assurance and security 130 -4

CloudSecurity Alliance CSA, 2012.,(Accessed 12 April -

M.Jensen,N.Gruschka, 2010.Attack Surfaces : A Taxonomy for Attacks on Cloud Services , Cloud Computing (Cloud,” 3rd IEEE International Conference on Cloud Computing 276 -279

D.Svantesson, 2010.,Computer Law & Security Review 26 391 -397

A.Zaidi,Thesis (Ph.D., Evry 2011.Recherche et des détection patterns Attaques d' dans les réseaux IP to Debits haut, -

V.Thiago, 102p.Arquitetura Multi-agentes para Detecção Distribuída de Intrusão,” Dissertation ( Masters ),UFC -

Oracle, 2013.Obtenha Informações sobre a Tecnologia Java,(Accessed 11 September) -

2012."Jpcap - Java library for capturing and sending network packets,",(Accessed 14 August) jpcap -

Libpcap, 2012.,(Accessed 10 April) -

CanonicalLtd,LTS, 2013.,(Accessed 11 September) -

RedHat, 2013."Kernel Based Virtual Machine,",Available -

RedHat, 2013."Virtualization libvirt API,", -

Oracle, 2013."VirtualBox,",(Accessed 11 September) -

Hping, 2013."hping,",(Accessed 30 October) -

S. S. G.L.Ryan,Ko, June 2013.-a-statistical-overview/ (Accessed: 28, -

C. Babcock., 2012.Cloud implementation to double by 2012,(Accessed: 2 Mai) cloud -

F.Gens, 2013.New IDC IT Cloud Services Survey: Top Benefits and Challenges”, 730 -

April 2015., 7 -

April2015, ., 7 -