Intrusion Detection System for Cloud Computing

Cloud computing is services which provides computing resources to each customer. There are various issues that need to be dealt with respect t o security and privacy in a cloud computing scenari o. One of the security issues is how to reduce the impact of denial of- service (DoS) attack or distributed den ial-of-service (DDoS) or many other different attacks in this envi ronment. To counter these kinds of attacks a intrus ion detection system is highly needed for protecting ea ch virtual machine against threats. An Intrusion de tection System (IDS) constantly monitors actions in a certa in environment and decides whether they are part of a possible hostile attack or a legitimate use of the environment. If the IDS provide stronger security s ervice using more rules or patterns, then it needs much more computing resources in proportion to the strength of s ecurity. So the amount of resources allocating for customers decreases. In this paper, we propose a method that enables cloud computing system to achieve both electiveness of using the system resource and strength of the s ecurity service without trade-off between them.