A survey of intrusion detection techniques in Cloud

Journal of Network and Computer Applications

Volumn 36, Issue 1, 2013, Pages 42-57

  Modi, Chirag ^a   Patel, Dhiren ^a   Borisaniya, Bhavesh ^a   Patel, Hiren ^b   Patel, Avi ^c   Rajarajan, Muttukrishnan ^c  

^a SARDAR VALLABHBHAI NATIONAL INSTITUTE OF TECHNOLOGY   (India)

^b S P College of Engineering   (India)

^c CITY UNIVERSITY   (United Kingdom)

Author keywords

Cloud computing; Firewalls; Intrusion detection system; Intrusion prevention system

Indexed keywords

DETECTION TECHNIQUE; INTRUSION DETECTION SYSTEMS; INTRUSION PREVENTION SYSTEMS;

CLOUD COMPUTING; COMPUTER CRIME; COMPUTER SYSTEM FIREWALLS; SURVEYS;

INTRUSION DETECTION;

EID: 84870696413     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2012.05.003     Document Type: Review

References (73)

1. Azure services platform, Website, 〈http://www.microsoft.com/ azure〉; 2011.
2. Amazon web services, Website, 〈http://aws.amazon.com〉; 2011.
3. J. Arshad, P. Townend, and J. Xu An abstract model for integrated intrusion detection and severity analysis for clouds International Journal of Cloud Applications and Computing 1 1 2011 1 17
4. Ahmed M., Pal, R., Hossain, H.M., Bikas, M., Hasan, M.K., NIDS: A Network Based Approach to Intrusion Detection and Prevention, Computer Science and Information Technology - Spring Conference;2009: pp. 141-4.
5. Brooks C, Amazon EC2 Attack Prompts Customer Support Changes. Tech Target, 〈http://searchcloudcomputing.techtarget.com/news/article/0,289142, sid201-gci1371090,00.html〉; 2009.
6. Bahram S, Jiang X, Wang Z, Grace M. DKSM: subverting virtual machine introspection for fun and profit.In: Proceedings of the 29th IEEE international symposium on reliable distributed systems; 2010.
7. Brown DJ, Suckow B, Wang T, A Survey of Intrusion Detection Systems. Department of Computer Science, University of California, San Diego; 2002.
8. Bakshi A, Yogesh, B. Securing cloud from DDOS attacks using intrusion detection system in virtual machine. In: Second international conference on communication software and networks; 2010: pp. 260-4.
9. M. Botha, R. Solms, K. Perry, E. Loubser, and G. Yamoyany The utilization of artificial intelligence in a hybrid intrusion detection system SAICSIT 2002 149 155
10. S. Beg, U. Naru1, M. Ashraf, and S. Mohsin Feasibility of intrusion detection system with high performance computing: a survey International Journal for Advances in Computer Science 1 1 2010
11. Y. Chen, and R. Sion On securing untrusted clouds with cryptography In WPES 10 2010 109 114
12. Cannady J. Artificial neural networks for misuse detection, National Information Systems Security Conference, 1998.
13. Chavan S, Shah K, Dave N, Mukherjee S, Adaptive neuro-fuzzy intrusion detection systems, IEEE international conference on information technology: coding and computing (ITCC04); 2004: pp 70-4.
14. W.-H. Chen, S.-H. Su, and H.-P. Shen Application of svm and ann for intrusion detection Computer Oper Res 32 10 2005 2617 2634
15. Dutkevyach T, Piskozub A, Tymoshyk, N. Real-time intrusion prevention and anomaly analyze system for corporate networks. In: Fourth IEEE workshop on intelligent data acquisition and advanced computing systems: technology and applications, 2007. IDAACS 2007: 2007: pp. 599-602
16. Dastjerdi AV, Bakar KA, Tabatabaei SGH. Distributed intrusion detection in clouds using mobile agents. In: Third international conference on advanced engineering computing and applications in sciences, 2009. ADVCOMP 09; 2009: pp. 175-180.
17. Y. Dhanalakshmi, and I. Ramesh Babu Intrusion detection using data mining along fuzzy logic and genetic algorithms International Journal of Computer Science & Security 8 2 2008 27 32
18. Eucalyptus, Website, 〈http://eucalyptus.cs.ucsb.edu/〉; 2011.
19. Fagui Liu L, Xiang S Wenqianl Su, L. The design and application of xen-based host system firewall and its extension. In: The 2009 international conference on electronic computer technology; 2009: pp. 392-5.
20. Google apps, Website, 〈http:/www.google.com〉; 2011.
21. Google app engine, Website, 〈http://code.google.com/appengine/ 〉; 2011.
22. Gens F, New IDC IT Cloud Service Survey: Top Benefits and Challenges, IDC Exchange, 〈http://blogs.idc.com/ie/?p=730〉; 2009.
23. Goodin, D, Webhost Hack Wipes Out Data for 100,000 Sites, 〈http://www.theregister.co.uk/2009/06/08/webhost-attack/〉; 2009
24. T. Garfinkel, and M. Rosenblum A Virtual Machine Introspection Based Architecture for Intrusion Detection Proc. Network and Distributed Systems Security Symposium 2003 191 206
25. Guan Y, Bao J. A CP Intrusion detection strategy on cloud computing, in international symposium on web information systems and applications (WISA); 2009: pp 84-7.
26. A. Grediaga, F. Ibarra, F. García, B. Ledesma, and F. Brotons Application of neural networks in network control and information security LNCS 2006 208 213
27. Gong RH, Zulkernine M, Abolmaesumi P. A software implementation of a genetic algorithm based approach to network intrusion detection. In: Proceedings of the sixth international conference on software engineering, articial intelligence, networking and parallel/distributed computing and rst ACIS international workshop on self-assembling wireless networks (SNPD/SAWN'05); 2005.
28. J. Han, and M. Kamber Data mining concepts and techniques 2nd edition 2006 Morgan Kaufmann Publishers
29. Han H, Lu XL, Ren LY.Using data mining to discover signatures in network-based intrusion detection. In: Proceedings of the first international conference on machine learning and cybernetics, Beijing (1) (2002).
30. Hemairy MA, Amin S, Trabelsi Z. Towards more sophisticated ARP Spoofing detection/prevention systems in LAN networks. In: International conference on the current trends in information technology (CTIT); 2009: pp. 1-6.
31. H. Hamad, and M.A. Hoby Managing intrusion detection as a service in cloud networks International Journal of Computer Applications 41 1 2012 35 40
32. Houmansadr A, Zonouz SA, Berthier, R, Cloud-based, A. Intrusion detection and response system for mobile phones. In: Proceedings of the 2011 IEEE/IFIP 41st international conference on dependable systems and networks workshops; 2011: pp. 31-2.
33. L.M. Ibrahim Anomaly network intrusion detection system based on distributed time-delay neural network Journal of Engineering Science and Technology 5 4 2010 457 471
34. Jones AK, Sielken RS. Computer system intrusion detection: a survey, 〈http://www.cs.virginia.edu/∼jones/IDS-research/Documents/ jones-sielken-survey-v11.pdf〉; 2000.
35. T. Jia, and X. Wang The research and design of intelligent IPS model based on dynamic cloud firewall linkage International Journal of Digital Content Technology and its Applications 5 3 2011 304 309
36. King S, Chen P, Wang Y-M. SubVirt: Implementing malware with virtual machines. In: 2006 IEEE symposium on security and privacy; 2006: pp 314-27.
37. C. Katar Combining multiple techniques for intrusion detection International Journal of Computer Science & Network Security 6 2B 2006 208 218
38. Kwon H, Kim,T, Yu, SJ, Kim HK. Self-similarity based lightweight intrusion detection method for cloud computing. In: Proceedings of the third international conference on intelligent information and database systems - Volume Part II; 2011: pp. 353-62.
39. Lo CC, Huang CC, Ku J. Cooperative Intrusion detection system framework for cloud computing networks. In: First IEEE International Conference on Ubi-Media Computing; 2008: pp. 280-4.
40. L. Lei, D.-Z. Yang, and F.-C. Shen A Novel rule based Intrusion Detection system using Data Ming 3rd IEEE International Conference on Computer Science and Information Technology 6 2010 169 172
41. H. Li, and D. Liu Research on intelligent intrusion prevention system based on snort International Conference on Computer, Mechatronics, Control and Electronic Engineering (CMCE), 1 2010 251 253
42. W. Li A genetic algorithm approach to network intrusion detection 2004 SANS Institute USA
43. W. Lu, and I. Traore Detecting new forms of network intrusion using genetic programming Computational Intelligence 20 3 2004 475 494
44. Lee, J-H, Park M-W, Eorn J-H, Chung T-M. Multi-level Intrusion detection system and log management in cloud computing. In: 13th International conference on advanced communication technology (ICACT); 2011, pp. 552-5.
45. F.Y. Leu, and Z.Y. Li Detecting DoS and DDoS attack using an intrusion detection and remote prevention system Fifth International Conference on Information Assurance and Security 2 2009 251 254
46. Mell P, Grance T, The NIST definition of cloud computing (draft), NIST, 〈http://csrc.nist.gov/publications/drafts/800-145/Draft-SP-800-145-cloud- definition.pdf〉; 2011.
47. Martin L, White Paper, 〈http://www.lockheedmartin.com/data/assets/ isgs/documents/CloudComputingWhitePaper.pdf〉; 2010.
48. Mazzariello C, Bifulco R, Canonoco R. Integrating a network IDS into an open source cloud computing. In: Sixth international conference on information assurance and security (IAS); 2010; pp. 265-70.
49. Moradi M, Zulkernine M, A neural network based system for intrusion detection and classification of attacks. In: Proceedings of the 2004 IEEE international conference on advances in intelligent systems - theory and applications; 2004.
50. NIST: National vulnerability database, Website, Available from: 〈http://web.nvd.nist.gov/view/ vuln/detail?vulnId=CVE-〉 2009-3733; 2011.
51. Opennebula, Website, 〈http://www.opennebula.org〉; 2011.
52. Rutkowska J, Subverting VistaTM Kernel for Fun and Profit, Black Hat Conference; 2006.
53. Roschke S, Feng C, Meinel C. An extensible and virtualization compatible IDS management architecture. In: Fifth international conference on information assurance and security, 2; 2009: pp. 130-4
54. S. Ram Secure cloud computing based on mutual intrusion detection system International journal of computer application 2 1 2012 57 67
55. Slaviero M. BlackHat presentation demo vids: Amazon, 〈http://www. sensepost.com/blog/3797.html〉; 2009.
56. Sequeira D, Intrusion Prevention Systems- Security's Silver Bullet? SANS Institute InfoSec Reading Room 2002, 〈http://www.sans.org/reading-room/ whitepapers/detection/intrusion-prevention-systems-securitys-silver-bullet-366? show=366.php&cat=detection〉; 2002.
57. M.-Y. Su, G.-J. Yu, and C.-Y. Lin A real-time network intrusion detection system for large-scale attacks based on an incremental mining approach Computer Security 2009 301 309
58. S.V. Sandar, and S. Shenai Economic denial of sustainability (EDoS) in cloud services using HTTP and XML based DDoS attacks International Journal of Computer Applications 41 20 2012 11 16
59. Scarfone K, Mell P, Guide to intrusion detection and prevention systems (IDPS), Recommendations of the National Institute of Standards and Technology, 〈http://csrc.nist.gov/publications/nistpubs/800-94/SP800-94.pdf〉; 2007:175-180 457-471
60. P. Tillapart, T. Thumthawatworn, and P. Santiprabhob Fuzzy intrusion detection system Assump University J Technology (A.U. J.T.) 6 2 2002 109 114
61. K. Vieira, A. Schulter, C. Westphall, and C. Westphall Intrusion detection techniques in grid and cloud computing environment IEEE IT Professional Magazine 2010
62. Xiao T, Qu G, Hariri S, Yousif M. An efficient network intrusion detection method based on information theory and genetic algorithm. In: Proceedings of the 24th IEEE international performance computing and communications conference (IPCCC '05), Phoenix, AZ, USA; 2005.
63. Zhengbing H, Jun S, Shirochin VP. An intelligent lightweight intrusion detection system with forensic technique. In: 4th IEEE workshop on intelligent data acquisition and advanced computingsystems: technology and applications, 2007. IDAACS; 2007: pp. 647-51.
64. Zhengbing H, Zhitang L, Jumgi W, Novel A. Intrusion detection system (NIDS) based on signature search of datamining, WKDD First International Workshop on Knowledge discovery and Data Ming; 2008: pp. 10-6.
65. cox P. Intrusion detection in a cloud computing environment. 〈http://searchcloudcomputing.techtarget.com/tip/Intrusion-detection-in-a- cloud-computing-environment〉; 2011.
66. Firewall, Telecom-Network Tech, 〈http://teleco-network.blogspot.com/ 〉; 2011.
67. Denial-of-service attack, Website, 〈http://en.wikipedia.org/wiki/ Denial-of-service-attack〉; 2011.
68. Snort-Home page, Website, 〈https://www.snort.org/〉; 2011.
69. The concept of Intrusion Detection System, Website, 〈http:// maltainfosec.org/archives/26-The-concept-of-Intrusion-Detection-Systems. html〉 (2011).
70. XArp 2.2.2, Website, 〈http://www.filecluster.com/Network-Tools/ Network-Monitoring/Download-XArp.html〉; 2011.
71. IBM Research-Zurich, Website, 〈http://www.zurich.ibm.com/csc/ security/securevirt.html#top〉; 2011.
72. IPS: Intrusion Prevention System. Javvin, Website, 〈http://www. javvin.com/networksecurity/IPS.html〉; 2011.
73. StiawanD, Abdullah, AH, Idris, MY.The trends of intrusion prevention system network. In: Second international conference on education technology and computer (ICETC) 4; 2010: 217-21