Performance Analysis and Security Based on Intrusion Detection and Prevention Systems in Cloud Data Centers

Intrusion Detection Systems allow detection of unwanted attempts accessing which can violate security policy, manipulation or disabling of computer systems through the Internet. IDS plays a vital role in securing cloud data centers. This paper introduces an analytical model based on embedded Markov chain to analyze the packet processing using Bro IDPS (Intrusion Detection Prevention System). In this paper, we combine the preventive and detective rules to find a trade-off between network performance and security. We focus on how to enhance the detection engine and to predict the attack signatures taking into account of average service time, packet loss and blocking probability.

[1]  Ahmed Patel,et al.  An intrusion detection and prevention system in cloud computing: A systematic review , 2013, J. Netw. Comput. Appl..

[2]  Vern Paxson,et al.  Bro: a system for detecting network intruders in real-time , 1998, Comput. Networks.

[3]  Kuldeep S. Raghuwanshi,et al.  Improved Snort Intrusion Detection System Using Modified Pattern Matching Technique , 2013 .

[4]  S. K. Srivatsa,et al.  Integrated Intrusion Detection Approach for Cloud Computing , 2016 .

[5]  Hans-Florian Geerdes,et al.  Intelligent Distribution of Intrusion Prevention Services on Programmable Routers , 2006, Proceedings IEEE INFOCOM 2006. 25TH IEEE International Conference on Computer Communications.

[6]  Raouf Boutaba,et al.  Performance analysis in Intrusion Detection and Prevention Systems , 2011, 12th IFIP/IEEE International Symposium on Integrated Network Management (IM 2011) and Workshops.

[7]  Dong Seong Kim,et al.  Security modeling and analysis of a self-cleansing intrusion tolerance technique , 2015, 2015 11th International Conference on Information Assurance and Security (IAS).

[8]  Raouf Boutaba,et al.  Performance Modeling and Analysis of Network Firewalls , 2012, IEEE Transactions on Network and Service Management.

[9]  Frank Doelitzscher,et al.  An agent based business aware incident detection system for cloud environments , 2012, Journal of Cloud Computing: Advances, Systems and Applications.

[10]  Dave Cliff,et al.  A financial brokerage model for cloud computing , 2011, Journal of Cloud Computing: Advances, Systems and Applications.

[11]  Yi Zhang,et al.  Performance Adaptation in Real-Time Intrusion Detection Systems , 2002, RAID.

[12]  Shahram Rahimi,et al.  Soft computing in intrusion detection: the state of the art , 2010, J. Ambient Intell. Humaniz. Comput..

[13]  Muttukrishnan Rajarajan,et al.  A survey of intrusion detection techniques in Cloud , 2013, J. Netw. Comput. Appl..

[14]  Dong Seong Kim,et al.  Security modeling and analysis of an intrusion tolerant cloud data center , 2015, 2015 Third World Conference on Complex Systems (WCCS).