Evaluation of experiments on detecting distributed denial of service (DDoS) attacks in eucalyptus private cloud

Advances in Intelligent Systems and Computing

Volumn 195 AISC, Issue , 2013, Pages 367-379

  Lonea, Alina Mǎdǎlina ^a   Popescu, Daniela Elena ^b   Prostean, Octavian ^a   Tianfield, Huaglory ^c  

^a POLITEHNICA UNIVERSITY OF TIMISOARA   (Romania)

^b UNIVERSITY OF ORADEA   (Romania)

^c GLASGOW CALEDONIAN UNIVERSITY   (United Kingdom)

Author keywords

attacks; cloud computing; data fusion; DDoS attacks; Dempster Shafer Theory (DST); Eucalyptus; Fault Tree Analysis; Intrusion Detection Systems (IDSs); Snort

Indexed keywords

CLOUD COMPUTING; COMPUTATION THEORY; DATA FUSION; FAULT TREE ANALYSIS; INTRUSION DETECTION; NETWORK SECURITY; SOFT COMPUTING; TREES (MATHEMATICS);

ATTACKS; DDOS ATTACK; DEMPSTER-SHAFER THEORY; EUCALYPTUS; INTRUSION DETECTION SYSTEMS; SNORT;

DENIAL-OF-SERVICE ATTACK;

EID: 84872860221     PISSN: 21945357     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-33941-7_34     Document Type: Conference Paper

References (30)

1. Lonea, A.M., Popescu, D.E., Tianfield, H.: Detecting Distributed Denial of Service (DDoS) Attacks in Cloud Computing Environment. International Journal of Computers, Communications & Control, IJCCC, 1841-9836 (accepted for publication, 2012) ISSN: 1841-9836
2. Bhadauria, R., et al.: A Survey on Security Issues in Cloud Computing. CoRR (2011), http://dblp.uni-trier.de/db/journals/corr/corr1109.html#abs-1109- 5388
3. Bakshi, A., Yogesh, B.: Securing Cloud from DDoS Attacks using Intrusion Detection System in Virtual Machine. In: Second International Conference on Communication Software and Networks, pp. 260-264. IEEE Computer Society, Washington, DC (2010)
4. Dhage, S.N., et al.: Intrusion Detection System in Cloud Computing Environment. In: International Conference and Workshop on Emerging Trends in Technology (ICWET 2011), pp. 235-239. TCET, Mumbai (2011)
5. Lee, J.-H., Park, M.-W., Eom, J.-H., Chung, T.-M.: Multi-level Intrusion Detection System and Log Management in Cloud Computing. In: 13th International Conference on Advanced Communication Technology, ICACT 2011, Seoul, pp. 552-555 (2011)
6. Lo, C.-C., Huang, C.-C., Ku, J.: A Cooperative Intrusion Detection System Framework for Cloud Computing Networks. In: 39th International Conference on Parallel Processing Workshops, pp. 280-284. IEEE Computer Society, Washington, DC (2010)
7. Mazzariello, C., Bifulco, R., Canonico, R.: Integrating a Network IDS into an Open Source Cloud Computing Environment. In: Sixth International Conference on Information Assurance and Security, pp. 265-270 (2010)
8. Roschke, S., Cheng, F., Meinel, C.: Intrusion Detection in the Cloud. In: Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing, pp. 729-734 (2009)
9. Eucalyptus Administrator's Guide (2.0), http://open.eucalyptus.com/wiki/ EucalyptusAdministratorGuide
10. Eucalyptus User's Guide (2.0), http://open.eucalyptus.com/wiki/ EucalyptusUserGuide-v2.0
11. Weir, J.: Building a Debian\Snort based IDS (2012), http://www.snort.org/ assets/167/IDS-deb-snort-howto.pdf
12. Moore, N.: Snort 2.9.1 CentOS 5.6 Installation Guide (2011), http://www.snort.org/assets/159/Snort-2.9.1-CentOS-5.pdf
13. Harper, P.: Snort Enterprise Install (2007), http://www. internetsecurityguru.com/documents/Snort-Base-Barnyard-CentOS-5.pdf
14. Sourcefire, Inc.: Snort Users Manual 2.9.2 (2011), http://www.snort.org/ assets/166/snort-manual.pdf
15. Rehman, R. U. R.: Intrusion Detection with Snort: Advanced IDS Techniques using Snort, Apache, Mysql, PHP and ACID. Pearson Education Inc. Publishing as Prentice Hall PTR (2003)
16. Baker, A.R., Esler, J.: Snort Intrusion Detection and Prevention Toolkit. Syngress Publishing, Inc. (2007)
17. Vanathi, R., Gunasekaran, S.: Comparison of Network Intrusion Detection Systems in Cloud Computing Environment. In: 2012 International Conference on Computer Communication and Informatics (ICCCI 2012), Coimbatore, India (2012)
18. Brennan, M.P.: Using Snort for a Distributed Intrusion Detection System. SANS Institute, Version 1.3 (2002), http://www.sans.org/reading-room/ whitepapers/detection/snort-distributed-intrusion-detection-system-352
19. Borisaniya, B., Patel, A., Patel, R., Patel, D.: Network-based Intrusion Detection in Eucalyptus Private Cloud. In: 2010 International Conference on Advances in Communication, Network, and Computing, India, pp. 209-212 (2010)
20. Skinner III, W.T.: Identity Management in a Public IaaS Cloud. James Madison University. Master Thesis (2012), http://www.scribd.com/doc/90183632/3/ Thesis-Statement
21. Dittrich, D.: The "stacheldraht" distributed denial of service attack tool. University of Washington (1999), http://staff.washington.edu/ dittrich/misc/stacheldraht.analysis.txt
22. Criscuolo, P.J.: Distributed Denial of Service Trin00, Tribe Flood Network, Tribe Flood Network 2000 and Stacheldraht. CIAC-2319. Department of Enery Computer Incident Advisory Capability, UCRL-ID-136939, Rev.1, Lawrence Livermore National Laboratory, https://e-reports-ext.llnl.gov/pdf/237595.pdf (2000)
23. Specht, S.M., Lee, R.B.: Distributed Denial of Service: Taxonomies of Attacks, Tools and Countermeasures. In: Proceedings of the 17th International Conference on Parallel and Distributed Systems, pp. 543-550 (2004)
24. Mirkovic, J., Martin, J., Reiher, P.: A Taxonomy of DDoS Attacks and DDoS Defense Mechanisms. ACM SIGCOMM Computer Communication Review 34(2), 39-53 (2004)
25. Northcutt, S., Novak, J.: Network Intrusion Detection, 3rd edn. New Riders Publishing (2002) ISBN 0-73571-265-4
26. w3schools.com, http://www.w3schools.com/sql/sql-join.asp
27. Guth, M.A.S.: A Probabilistic Foundation for Vagueness & Imprecision in Fault-Tree Analysis. IEEE Transactions on Reliability 40(5), 563-569 (1991)
28. Yu, D., Frincke, D.: Alert Confidence Fusion in Intrusion Detection Systems with Extended Dempster-Shafer Theory. In: Proceedings of the 43rd ACM Southeast Conference. ACM-SE, vol. 43, pp. 142-147 (2005)
29. Thomas, C., Balakrishnan, N.: Performance Enhancement of Intrusion Detection Systems using advances in sensor fusion. In: 11th International Conference on Information Fusion, pp. 1-7 (2008)
30. Witten, I.H., Frank, E.: Data Mining. In: Practical Machine Learning Tools and Techniques, 2nd edn. Kaufmann Press, San Francisco (2005)