An agent based business aware incident detection system for cloud environments

Journal of Cloud Computing

Volumn 1, Issue 1, 2012, Pages 1-19

  Doelitzscher, Frank ^a   Reich, Christoph ^a   Knahl, Martin ^a   Passfall, Alexander ^a   Clarke, Nathan ^b  

^a FURTWANGEN UNIVERSITY   (Germany)

^b UNIVERSITY OF PLYMOUTH   (United Kingdom)

Author keywords

Agents; Cloud audit; Cloud security

Indexed keywords

AGENTS; ARCHITECTURE; AUTONOMOUS AGENTS; HIGH LEVEL LANGUAGES; INTRUSION DETECTION;

BEHAVIOUR ANALYSIS; CLOUD AUDITS; CLOUD ENVIRONMENTS; CLOUD INFRASTRUCTURES; CLOUD SECURITIES; INCIDENT DETECTION SYSTEMS; INTELLIGENT AUTONOMOUS AGENTS; SECURITY PROBLEMS;

COMPUTER ARCHITECTURE;

EID: 84926426274     PISSN: None     EISSN: 2192113X     Source Type: Journal    
DOI: 10.1186/2192-113X-1-9     Document Type: Article

References (86)

1. Brunette G, Mogull R: Security Guidance for critical areas of focus in Cloud Computing V2. 1. CSA (Cloud Security Alliance) USA 1. 2009.
2. Catteddu D, Hogben G: Cloud Computing - Benefits, risks and recommendations for information security. ENISA (Eur Network and Inf Security) Europe 1. 2009.
3. Vaquero L, Rodero-Merino L, Moran D: Locking the sky: a survey on IaaS cloud security. Computing 2011, 91: 93-118.
4. Chen Y, Paxson V, Katz RH: What's New About Cloud Computing Security? 2010.
5. Mell P, Grance T: Effectively and Securely Using the Cloud Computing Paradigm. 2009.
6. Business Insider: Inside Amazon's Cloud Disaster. 2011.
7. Business Insider: Amazon's Cloud Crash Disaster Permanently Destroyed Many Customers' Data. 2011.
8. Amazon Service Health Dashboard 2011.
9. Dölitzscher F, Reich C, Sulistio A: Designing Cloud Services Adhering to Government Privacy Laws. In Proceedings of 10th IEEE International Conference on Computer and Information Technology (CIT 2010). Furtwangen, Germany; 2010: 930-935.
10. Spafford EH, Zamboni D: Intrusion detection using autonomous agents. Comput Networks 2000, 34(4): 547-570. Recent Advances in Intrusion Detection Systems.
11. Wang C, Wang Q: Privacy-Preserving Public Auditing for Data Storage Security in Cloud Computing. In INFOCOM, 2010 Proceedings IEEE. Lou W; 2010: 1-9.
12. Zhu Y, Ahn G, Hu H, Yau S: Dynamic Audit Services for Outsourced Storages in Clouds. Services Comput, IEEE Trans on 2011, 99: 1.
13. Massonet P, Naqvi S, Ponsard C, Latanicki J, Rochwerger B, Villari M: A Monitoring and Audit Logging Architecture for Data Location Compliance in Federated Cloud Infrastructures. In Parallel and Distributed Processing Workshops and Phd Forum (IPDPSW). 2011 IEEE International Symposium on 2011, 1510-1517.
14. Cloud Security Alliance: Governance, Risk Management and Compliance (CSR). 2011.
15. Hoss C, Johnston S, Reese G, Sapiro B: CloudAudit 1. 0 - Automated Audit, Assertion, Assessment, and Assurance API (A6) Tech. rep. Internet Engineering Task Force - Internet Draft - Experimental. 2010.
16. Cloud Security Alliance: CloudTrust Protocol Information Overview Powerpoint. 2011.
17. EuroCloud Deutschland_eco eV: Eurocloud star audit saas certificate. 2011.
18. Nascimento G, Correia M: Anomaly-based intrusion detection in software as a service. IEEE/IFIP 41st International Conference on 2011, 19-24. [http://dx. doi. org/10. 1109/DSNW. 2011. 5958858].
19. Banerjee A, Chandola V, Srivastava J, Lazarevic A: Anomaly Detection: A Tutorial. SIAM International Conference on Data Mining 2008. [http://www. siam. org/meetings/sdm08/TS2. ppt].
20. Lazarevic A, Ertoz L, Kumar V, Ozgur A, Srivastava J: A comparative study of anomaly detection schemes in network intrusion detection. 2003.
21. Garcia-Teodoro P, Daaz-Verdejo J, Macia-Fernandez G, Vazquez E: Anomaly-based network intrusion detection: Techniques, systems and challenges. Comput Security 2009, 28(1-2): 18-28. [http://linkinghub. elsevier. com/retrieve/pii/S0167404808000692].
22. Patcha A, Park JM: An overview of anomaly detection techniques: Existing solutions and latest technological trends. Comput Networks 2007, 51(12): 3448-3470. [http://linkinghub. elsevier. com/retrieve/pii/S138912860700062X].
23. Roschke S, Cheng F, Meinel C: Intrusion Detection in the Cloud. Dependable, Autonomic and Secure Computing, 2009 2009, 729-734. [http://dx. doi. org/10. 1109/DASC. 2009. 94].
24. Vieira K, Schulter A, Westphall CB, Westphall CM: Intrusion Detection for Grid and Cloud Computing. It Professional 2010, 12(4): 38-43. [http://ieeexplore. ieee. org/lpdocs/epic03/wrapper. htm?arnumber=5232794].
25. Raj H, Schwan K: Extending virtualization services with trust guarantees via behavioral monitoring. In Proceedings of the 1st EuroSys Workshop on Virtualization Technology for Dependable Systems, VDTS'09. New York; 2009: 24-29.
26. Wei J, Zhang X, Ammons G, Bala V, Ning P: Managing security of virtual machine images in a cloud environment. In Proceedings of the 2009 ACM workshop on Cloud computing security, CCSW '09. New York; 2009: 91-96. [http://doi. acm. org/10. 1145/1655008. 1655021].
27. Antonopoulos A: Securing Virtualized Infrastructure: From Static Security to Virtual Shields. Tech. rep., Nemertes Research 2007. [http://hackreport. net/wp-content/uploads/2007/03/nemertes-issue-paper-securing-virtualized-infrastructure. pdf].
28. Schaaf M, Koschel A, Grivas SG, Astrova I: An active DBMS style activity service for cloud environments. Cloud Computing 2010: The First International Conference on Cloud Computing, GRIDs, and Virtualization in Cloud Computing 2010 in ComputationWorld 2010 IARIA 2010, 80-85.
29. Wooldridge M: Agent Applications, Research, and Technology. [http://www. csc. liv. ac. uk/~mjw/Prof_Michael_Wooldridge_-_Home_Page].
30. Rao AS, Georgeff MP: BDI Agents: From Theory to Practice. PROCEEDINGS OF THE FIRST INTERNATIONAL CONFERENCE ON MULTI-AGENT SYSTEMS. ICMAS-95 1995, 312-319.
31. Lui CL, Fu TC, Cheung TY: Third International Conference on, Volume 1. ICITA 2005; 2005: 131-136.
32. Chirumamilla M, Ramamurthy B: Agent based intrusion detection and response system for wireless LANs. Communications, 2003. ICC '03 2003, 492-496.
33. Dasgupta D, Gonzalez F, Yallapu K, Gomez J, Yarramsettii R: CIDS: An agent-based intrusion detection system. 2005.
34. Krügel C, Based MA: SPARTA - a mobile agent based intrusion detection system. In Proceedings OF THE IFIP CONFERENCE ON NETWORK SECURITY (I-NETSEC). Berlin, Heidelberg; 2001.
35. Balasubramaniyan J, Garcia-Fernandez J, Isacoff D, Spafford E, Zamboni D: An architecture for intrusion detection using autonomous agents. Computer Security Applications Conference, 1998, Proceedings., 14th Annual, 1998, pp 13-24.
36. Mo Y, Ma Y, Xu L: Design and implementation of intrusion detection based on mobile agents. IT in Medicine and Education, 2008. ITME 2008. IEEE International Symposium on, 2008, pp 278-281.
37. Sen J, Sengupta I, Chowdhury P: An architecture of a distributed intrusion detection system using cooperating agents. Computing Informatics, 2006. ICOCI '06. International Conference on, 2006, pp 1-6.
38. Cloud Security Alliance: Top Threats to Cloud Computing V1. 0. 2010.
39. Doelitzscher F, Ardelt M, Knahl M, Reich C: Sicherheitsprobleme für IT Outsourcing basierend auf Cloud Computing. HMD - Praxis der Wirtschaftsinformatik 2011, 281: 62.
40. Bradshaw JM: An introduction to software agents. Cambridge; 1997. pp 3-46.
41. Grimshaw D: JADE Administration Tutorial. 2011.
42. Staniford-chen S, Cheung S, Crawford R, Dilger M, Frank J, Hoagl J, Levitt K, Wee C, Yip R, Zerkle D: GrIDS - A Graph Based Intrusion Detection System For Large Networks. Proceedings of the 19th National Information Systems Security Conference, 1996, pp 361-370.
43. Schneider J: Systemautomatisierung. In Kircher H(ed) IT,. Berlin Heidelberg; 2007: pp 110-123. [10. 1007/978-3-540-46165-4_9]. [http://dx. doi. org/10. 1007/978-3-540-46165-4_9].
44. Sulistio A, Reich C, Dölitzscher F: Cloud Infrastructure & Applications - CloudIA. In Proceedings of the 1st International Conference on Cloud Computing (CloudCom'09),. Beijing, China; 2009: pp 583-588. [http://dx. doi. org/10. 1007/978-3-642-10665-1_56].
45. Cucurull J, Marti R, Navarro-Arribas G, Robles S, Overeinder B, Borrell J: Agent mobility architecture based on IEEE-FIPA standards. Comput Commun 2009, 32(4): 712-729.
46. Winter P, Lampesberger H, Zeilinger M: Anomalieerkennung in Computernetzen. Datenschutz und Datensicherheit-DuD 2011, 35(4): 235-239. [http://www. springerlink. com/index/K12443031LQ84V55. pdf].
47. OWASP: Top 10. The Ten Most Critical Web Application Security Risks. Tech. rep., OWASP The Open Web Application Security Project 2010. 2010.
48. Kortchinsky K: Cloudburst. Black Hat USA 2009. [http://www. blackhat. com/presentations/bh-usa-09/KORTCHINSKY/BHUSA09-Kortchinsky-Cloudburst-PAPER. pdf].
49. Elhage N: Virtunoid: A KVM Guest → Host privilege, escalation exploit. Black Hat USA 2011. [http://media. blackhat. com/bh-us-11/Elhage/BH_US_11_Elhage_Virtunoid_WP. pdf].
50. Hofmeyr SA, Forrest S, Somayaji A: Intrusion Detection using Sequences of System Calls. J Comput Security 1998, 6: 151-180.
51. Cortese E, Quarta F, Vitaglione G, Lab TI, Direzionale C, Message J, System T: Scalability and Performance of JADE Message Transport System. Journal of Analysis of Suitability for Holonic Manufacturing Systems 2002, 3(3): 52-65. [http://citeseer. ist. psu. edu/vitaglione02scalability. html].
52. BootChart 2012. [http://wiki. ubuntuusers. de/BootChart].
53. Banerjee A, Chandola V, Srivastava J, Lazarevic A: Anomaly Detection: A Tutorial. SIAM International Conference on Data Mining 2008. [http://www. siam. org/meetings/sdm08/TS2. ppt].
54. Lazarevic A, Ertoz L, Kumar V, Ozgur A, Srivastava J: A comparative study of anomaly detection schemes in network intrusion detection. 2003.
55. Garcia-Teodoro P, Daaz-Verdejo J, Macia-Fernandez G, Vazquez E: Anomaly-based network intrusion detection: Techniques, systems and challenges. Comput Security 2009, 28(1-2): 18-28. [http://linkinghub. elsevier. com/retrieve/pii/S0167404808000692].
56. Patcha A, Park JM: An overview of anomaly detection techniques: Existing solutions and latest technological trends. Comput Networks 2007, 51(12): 3448-3470. [http://linkinghub. elsevier. com/retrieve/pii/S138912860700062X].
57. Roschke S, Cheng F, Meinel C: Intrusion Detection in the Cloud. Dependable, Autonomic and Secure Computing, 2009 2009, 729-734. [http://dx. doi. org/10. 1109/DASC. 2009. 94].
58. Vieira K, Schulter A, Westphall CB, Westphall CM: Intrusion Detection for Grid and Cloud Computing. It Professional 2010, 12(4): 38-43. [http://ieeexplore. ieee. org/lpdocs/epic03/wrapper. htm?arnumber=5232794].
59. Raj H, Schwan K: Extending virtualization services with trust guarantees via behavioral monitoring. In Proceedings of the 1st EuroSys Workshop on Virtualization Technology for Dependable Systems, VDTS'09. New York; 2009: 24-29.
60. Wei J, Zhang X, Ammons G, Bala V, Ning P: Managing security of virtual machine images in a cloud environment. In Proceedings of the 2009 ACM workshop on Cloud computing security, CCSW '09. New York; 2009: 91-96. [http://doi. acm. org/10. 1145/1655008. 1655021].
61. Antonopoulos A: Securing Virtualized Infrastructure: From Static Security to Virtual Shields. Tech. rep., Nemertes Research 2007. [http://hackreport. net/wp-content/uploads/2007/03/nemertes-issue-paper-securing-virtualized-infrastructure. pdf].
62. Schaaf M, Koschel A, Grivas SG, Astrova I: An active DBMS style activity service for cloud environments. Cloud Computing 2010: The First International Conference on Cloud Computing, GRIDs, and Virtualization in Cloud Computing 2010 in ComputationWorld 2010 IARIA 2010, 80-85.
63. Wooldridge M: Agent Applications, Research, and Technology. [http://www. csc. liv. ac. uk/~mjw/Prof_Michael_Wooldridge_-_Home_Page].
64. Rao AS, Georgeff MP: BDI Agents: From Theory to Practice. PROCEEDINGS OF THE FIRST INTERNATIONAL CONFERENCE ON MULTI-AGENT SYSTEMS. ICMAS-95 1995, 312-319.
65. Lui CL, Fu TC, Cheung TY: Third International Conference on, Volume 1. ICITA 2005; 2005: 131-136.
66. Chirumamilla M, Ramamurthy B: Agent based intrusion detection and response system for wireless LANs. Communications, 2003. ICC '03 2003, 492-496.
67. Dasgupta D, Gonzalez F, Yallapu K, Gomez J, Yarramsettii R: CIDS: An agent-based intrusion detection system. 2005.
68. Krügel C, Based MA: SPARTA - a mobile agent based intrusion detection system. In Proceedings OF THE IFIP CONFERENCE ON NETWORK SECURITY (I-NETSEC). Berlin, Heidelberg; 2001.
69. Balasubramaniyan J, Garcia-Fernandez J, Isacoff D, Spafford E, Zamboni D: An architecture for intrusion detection using autonomous agents. Computer Security Applications Conference, 1998, Proceedings., 14th Annual, 1998, pp 13-24.
70. Mo Y, Ma Y, Xu L: Design and implementation of intrusion detection based on mobile agents. IT in Medicine and Education, 2008. ITME 2008. IEEE International Symposium on, 2008, pp 278-281.
71. Sen J, Sengupta I, Chowdhury P: An architecture of a distributed intrusion detection system using cooperating agents. Computing Informatics, 2006. ICOCI '06. International Conference on, 2006, pp 1-6.
72. Cloud Security Alliance: Top Threats to Cloud Computing V1. 0. 2010.
73. Doelitzscher F, Ardelt M, Knahl M, Reich C: Sicherheitsprobleme für IT Outsourcing basierend auf Cloud Computing. HMD - Praxis der Wirtschaftsinformatik 2011, 281: 62.
74. Bradshaw JM: An introduction to software agents. Cambridge; 1997. pp 3-46.
75. Grimshaw D: JADE Administration Tutorial. 2011.
76. Staniford-chen S, Cheung S, Crawford R, Dilger M, Frank J, Hoagl J, Levitt K, Wee C, Yip R, Zerkle D: GrIDS - A Graph Based Intrusion Detection System For Large Networks. Proceedings of the 19th National Information Systems Security Conference, 1996, pp 361-370.
77. Schneider J: Systemautomatisierung. In Kircher H(ed) IT,. Berlin Heidelberg; 2007: pp 110-123. [10. 1007/978-3-540-46165-4_9]. [http://dx. doi. org/10. 1007/978-3-540-46165-4_9].
78. Sulistio A, Reich C, Dölitzscher F: Cloud Infrastructure &; Applications - CloudIA. In Proceedings of the 1st International Conference on Cloud Computing (CloudCom'09),. Beijing, China; 2009: pp 583-588. [http://dx. doi. org/10. 1007/978-3-642-10665-1_56].
79. Cucurull J, Marti R, Navarro-Arribas G, Robles S, Overeinder B, Borrell J: Agent mobility architecture based on IEEE-FIPA standards. Comput Commun 2009, 32(4): 712-729.
80. Winter P, Lampesberger H, Zeilinger M: Anomalieerkennung in Computernetzen. Datenschutz und Datensicherheit-DuD 2011, 35(4): 235-239. [http://www. springerlink. com/index/K12443031LQ84V55. pdf].
81. OWASP: Top 10. The Ten Most Critical Web Application Security Risks. Tech. rep., OWASP The Open Web Application Security Project 2010. 2010.
82. Kortchinsky K: Cloudburst. Black Hat USA 2009. [http://www. blackhat. com/presentations/bh-usa-09/KORTCHINSKY/BHUSA09-Kortchinsky-Cloudburst-PAPER. pdf].
83. Elhage N: Virtunoid: A KVM Guest → Host privilege, escalation exploit. Black Hat USA 2011. [http://media. blackhat. com/bh-us-11/Elhage/BH_US_11_Elhage_Virtunoid_WP. pdf].
84. Hofmeyr SA, Forrest S, Somayaji A: Intrusion Detection using Sequences of System Calls. J Comput Security 1998, 6: 151-180.
85. Cortese E, Quarta F, Vitaglione G, Lab TI, Direzionale C, Message J, System T: Scalability and Performance of JADE Message Transport System. Journal of Analysis of Suitability for Holonic Manufacturing Systems 2002, 3(3): 52-65. [http://citeseer. ist. psu. edu/vitaglione02scalability. html
86. Cloud Research Lab - Furtwangen University: Security Audit as a Service project website. 2012.