CloudMon: A resource-efficient IaaS cloud monitoring system based on networked intrusion detection system virtual appliances

Concurrency and Computation: Practice and Experience

Volumn 27, Issue 8, 2015, Pages 1861-1885

  Li, Bo ^a   Li, Jianxin ^a   Liu, Lu ^b  

^a BEIHANG UNIVERSITY   (China)

^b UNIVERSITY OF DERBY   (United Kingdom)

Author keywords

cloud environments; dynamic provision; fuzzy control; NIDS virtual appliance; resource management

Indexed keywords

COMPUTER CRIME; CONFORMAL MAPPING; DYNAMICS; ECONOMIC AND SOCIAL EFFECTS; EFFICIENCY; FUZZY CONTROL; INTRUSION DETECTION; NETWORK SECURITY; RESOURCE ALLOCATION; SCHEDULING; VIRTUAL MACHINE;

CLOUD ENVIRONMENTS; DYNAMIC RESOURCE PROVISIONS; INTRUSION DETECTION SYSTEMS; PERFORMANCE GUARANTEES; PERFORMANCE REQUIREMENTS; RESOURCE MANAGEMENT; VIRTUAL APPLIANCE; VIRTUAL MACHINE MONITORS;

INFRASTRUCTURE AS A SERVICE (IAAS);

EID: 84928114546     PISSN: 15320626     EISSN: 15320634     Source Type: Journal    
DOI: 10.1002/cpe.3166     Document Type: Article

References (32)

1. Atzori L, Iera A, Morabito G,. The Internet of Things: a survey, Computer Networks 2010; 54: 2787-2805.
2. Gubbi J, Buyya R, Marusic S, Palaniswami M,. Internet of Things (IoT): a vision, architectural elements, and future directions. Technical Report, Submitted on 1 Jul 2012.
3. Fox GC, Kamburugamuve S, Hartman RD,. Architecture and measured characteristics of a cloud based internet of things API, International Conference on Collaboration Technologies and Systems (CTS), 2012.
4. Yuriyama M, Kushida T,. Sensor-cloud infrastructure-physical sensor management with virtualized sensors on cloud computing, 13th international conference on network-based information systems (NBiS), Sept. 2010, pp. 1-8.
5. Alam S, Chowdhury MMR, Noll J,. SenaaS: an event- driven sensor virtualization approach for Internet of Things Cloud, IEEE International Conference on Networked Embedded Systems for Enterprise Applications (NESEA), 2010.
6. Sapuntzakis, Constantine P, Lam MS,. Virtual Appliances in the Collective: A Road to Hassle-Free Computing. In HotOS. 2003, pp. 55-60.
7. Roesch M,. Snort-lightweight intrusion detection for networks, in Proceedings of the USENIX LISA '99 Conference, November 1999.
8. Markatos E, Antonatos S, Polychronakis M, Anagnostakis K,. Exclusion-based signature matching for intrusion detection, in Proceedings of the IASTED international conference on communications and computer networks, CCN, 2002.
9. Dreger H, Feldmann A, Paxson V, Sommer R,. Predicting the resource consumption of network intrusion detection systems. In Recent Advances in Intrusion Detection, Lippmann R, Kirda E, Trachtenberg A, (eds), 2008; 135-154.
10. Garey MR, Graham RL, Johnson DS, Andrew MR, Garey RL, Graham DS, Johnson A,. Resource Constrained Scheduling as Generalized Bin Packing. Journal of Combinatorial Theory 1976; 21: 257-298
11. Miller RE, Thatcher JW,. Reducibility among combinatorial problems. In Complexity of Computer Computations. Springer: New York, USA, 1972; 85-103.
12. Rao CS, Geevarghese JJ, Rajan K,. Improved approximation bounds for Vector Bin Packing. Technical Report, 2010.
13. Wang Z, Zhu X, Singhal S,. Utilization and SLO-based control for dynamic sizing of resource partitions. In Proceeding of 16th IFIP/IEEE Distributed Systems: Operations and Management (DSOM), October 2005.
14. Galambos G, Woeginger GJ,. On-line bin packing a restricted survey. Mathematical Methods of Operations Research 1995; 42 (1): 25-45.
15. Li B, Li J, Huai J, Wo T, Li Q, Zhong L,. Enacloud: an energy-saving application live placement approach for cloud computing environments. In Proceedings of the 2009 IEEE International Conference on Cloud Computing, pages 17-24, Bangalore, India, 2009.
16. Henning J,. SPEC CPU2006 benchmark descriptions. ACM SIGARCH Computer Architecture News 34.4, 2006.
17. Cohen B,. Incentives build robustness in bittorrent. In P2P Economics Workshop, Berkeley, CA, 2003.
18. Kourai K, Chiba S,. Hyperspector: virtual distributed monitoring environments for secure intrusion detection, in Proceedings of the 1st ACM/USENIX International Conference on Virtual Execution Environments, 2005.
19. Christiansen CA,. Virtual security appliance survey: What's really going on?, IDC Report, 2009.
20. Garfinkel T, Rosenblum M,. A virtual machine introspection based architecture for intrusion detection, in Proceedings of the 10th Annual Network and Distributed System Security Symposium, Feb. 2003.
21. Joshi A, King ST, Dunlap GW, Chen PM,. Detecting past and present intrusions through vulnerability-specific predicates, in Proceedings of the 2005 SOSP, Oct. 2005.
22. Anagnostakis KG, Sidiroglou S, Akritidis P, Xinidis K, Markatos E, Keromytis AD,. Detecting targeted attacks using shadow honeypots. Proc. of the 14th USENIX Security Symposium, 2005.
23. Paxson V., Bro: a system for detecting network intruders in real-time. Computer Networks 1999; 31 (23-24): 2435-2463.
24. Kruegel C, Valeur F, Vigna G, Kemmerer R,. Stateful intrusion detection for high-speed networks, in proceedings of IEEE symposium security and privacy. IEEE Computer Society Press: Calif., 2002.
25. Lee W, Cabrera JB, Thomas A, Balwalli N, Saluja S, Zhang Y,. Performance adaptation in real-time intrusion detection systems, in recent advances in intrusion detection, 2002.
26. Lee W, Fan W, Miller M, Stolfo SJ, Zadok E,. Toward cost-sensitive modeling for intrusion detection and response. Journal of Computer Security 2002; 10 (1-2): 5-22.
27. Xu J, Zhao M, Fortes J, Carpenter R, Yousif M,. Autonomic resource management in virtualized data centers using fuzzy logic-based approaches. Cluster Comput. J. 2008; 11: 213-227.
28. Fu S, Xu C,. Migration decision for hybrid mobility in reconfigurable distributed virtual machines. In Proceedings of the 2004 International Conference on Parallel Processing. ICPP. IEEE Computer Society: Washington, DC, 2004; 335-342.
29. Shen K, Tang H, Yang T, Chu L,. Integrated resource management for cluster-based internet services. ACM SIGOPS Operating Systems Review 2002; 36 (SI): 225-238.
30. Chase J, Anderson D, Thakar P, Vahdat A, Doyle R,. Managing energy and server resources in hosting centers. In Proc. of Symposium on Operating Systems Principles (SOSP) (October 2001).
31. Wood T, Shenoy PJ, Venkataramani A, Yousif MS,. Black-box and gray-box strategies for virtual machine migration. In NSDI (2007), USENIX.
32. Verma A, Ahuja P, Neogi A,. pMapper: power and migration cost aware application placement in virtualized systems. Middleware 2008: 243-264.