CloudIDS: Cloud Intrusion Detection Model Inspired by Dendritic Cell Mechanism.

Azuan Ahmad; Norbik Bashah Idris; Mohd Nazri Kama

Author(s)

Azuan Ahmad Advanced Informatic School. University of Technology Malaysia, 54100 Kuala Lumpur, Malaysia

Norbik Bashah Idris Advanced Informatic School. University of Technology Malaysia, 54100 Kuala Lumpur, Malaysia

Mohd Nazri Kama Advanced Informatic School. University of Technology Malaysia, 54100 Kuala Lumpur, Malaysia

Abstract

Cloud Computing Security is a new era of computer technology and opens a new research area and creates a lot of opportunity of exploration. One of the new implementation in Cloud is Intrusion Detection System (IDS).There are problems with existing IDS approach in Cloud environment. Implementing traditional IDS need a lot of self-maintenance and did not scale with the customer security requirements. In addition, maintenance of traditional IDS in Cloud Computing system requires expertise and consumes more time where not each Cloud user has. A decentralized traditional IDS approach where being deployed in current Cloud Computing infrastructure will make the IDS management become complicated. Each user's IDS will not be the same in term of type and configurations and each user may have outdated signatures. Inter VM's communication also become a big concern when we implementing Cloud Computing system where communication between Clouds are not monitored and controlled by the traditional IDS. A specific IDS model for Cloud computing is required to solve these problems. In this paper, we develop a prototype of Cloud IDS inspired by Dendritic Cell mechanism. Experiment result proved that Cloud IDS was able to detect any attempt to attack the Cloud environment. The experiments show that the Cloud IDS model based on Dendritic Cell algorithm able to identify and detect novel threat that targeting Cloud environment.

Publication Details

Page(s) 67-75

DOI DOI not available

Published Journal: International Journal of Communication Networks and Information Security, Volume: 9, Issue: 1, Year: 2017

Request the full text from PASTIC

Keywords

intrusion detection, artificial immune system, artificial immune system, artificial immune system, artificial immune system, information security, dendritic cell

References

BBC, 2012."Google and Apple among hundreds hit in high-profile Pakistan hack,",26th November -

CyberSecurity., 2012., -

.Hacking costs Malaysia MYR 3.3 million., -

P.Mell,T.Grance, 2011."The NIST definition of cloud computing (draft)," NIST special publication, 800 145 -

D.Gollmann, 2010."Computer security,",Wiley Interdisciplinary Reviews: Computational Statistics 2 544 -554

S.Subashini,V.Kavitha, 2011."A survey on security issues in service delivery models of cloud computing,",Journal of Network and Computer Applications 34 1 -11

I. Cymtec Systems.,W.Yassin,N.Udzir,Z.Muda,A.Abdullah,M., 2012.Scout Cloud-Enabled IDS Fact Sheet, -

Abdullah, 2012."A Cloud-based Intrusion Detection Service framework," in Cyber Security, Cyber Warfare and Digital Forensic (CyberSec, 213 -218

J.Arshad,P.Townend,J.Xu, ."A novel intrusion severity analysis approach for Clouds," Future Generation Computer Systems, 29 -

T.Garfinkel,M.Rosenblum, 2003."A Virtual Machine Introspection Based Architecture for Intrusion Detection,",in NDSS 191 -206

K.Nance,B.Hay,M.Bishop, ."Virtual machine introspection,",IEEE Computer Society 6 -

Junaid, 2014."HIDS: A host based intrusion detection system for cloud computing environment,",International Journal of System Assurance Engineering and Management 1 -10

C.Mazzariello,R.Bifulco,R.Canonico, 2010."Integrating a network ids into an open source cloud computing environment," in Information Assurance and Security (IAS, 265 -270

H.Kwon,T.Kim,S. J.Yu,H. K.Kim, 2011."Selfsimilarity based lightweight intrusion detection method for cloud computing,",in Asian Conference on Intelligent Information and Database Systems 353 -362

N. D.Man,E.-N.Huh, 2012."A collaborative intrusion detection system framework for cloud computing,",in Proceedings of the International Conference on IT Convergence and Security 91 -109

J. D. Araújo , D. de Andrade Rodrigues, L. S. de Melo, and Z.,Abdelouahab, 2015."EICIDS-elastic and internal cloud-based detection system,",International Journal of Communication Networks and Information Security 7 34 -

Z.Al Haddad,M.Hanoune,A.Mamouni, 2016."A Collaborative Network Intrusion Detection System (C-NIDS) in Cloud Computing,",International Journal of Communication Networks and Information Security 8 130 -

D.Singh,D.Patel,B.Borisaniya,C.Modi, 2016."Collaborative IDS Framework for Cloud,",International Journal of Network Security 18 699 -709

J.Greensmith,U.Aickelin, 2007."Dendritic cells for SYN scan detection,",in Proceedings of the 9th annual conference on Genetic and evolutionary computation 49 -56

P. J.Bentley,J.Greensmith,S.Ujjin, 2005."Two ways to grow tissue for artificial immune systems,",in Artificial Immune Systems 139 -152

N. B. I. RaedAl-Dhubhani,FaisalSaeed, ."A Prototype for Network Intrusion Detection System using Danger Theory,",Jurnal Teknologi 73 -

February 2015., 8 -

D.Dasgupta,H.Brian,ExpositionII, 2001."Mobile security agents for network traffic analysis," in DARPA Information Survivability Conference, -

2001.,DISCEX'01. Proceedings 332 -340

R. L.Fanelli, 2010."Further experimentation with hybrid immune inspired network intrusion detection,",in International Conference on Artificial Immune Systems 264 -275