IDPS: an integrated intrusion handling model for cloud computing environment

Alsafi, Hassen Mohammed and Abduallah, Wafaa Mustafa and Pathan, Al-Sakib Khan (2012) IDPS: an integrated intrusion handling model for cloud computing environment. International Journal of Computing & Information Technology (IJCIT), 4 (1). pp. 1-16. ISSN 0974-696X

PDF - Published Version Restricted to Repository staff only Download (2MB) | Request a copy

Abstract

Today, many organizations are moving their computing services towards the Cloud. This makes their computer processing available much more conveniently to users. However, it also brings new security threats and challenges about safety and reliability. In fact, Cloud Computing is an attractive and cost-saving service for buyers as it provides accessibility and reliability options for users and scalable sales for providers. In spite of being attractive, Cloud feature poses various new security threats and challenges when it comes to deploying Intrusion Detection System (IDS) in Cloud environments. Most Intrusion Detection Systems (IDSs) are designed to handle specific types of attacks. It is evident that no single technique can guarantee protection against future attacks. Hence, there is a need for an integrated scheme which can provide robust protection against a complete spectrum of threats. On the other hand, there is great need for technology that enables the network and its hosts to defend themselves with some level of intelligence in order to accurately identify and block malicious traffic and activities. In this case, it is called Intrusion prevention system (IPS). Therefore, in this paper, we emphasize on recent implementations of IDS on Cloud Computing environments in terms of security and privacy. We propose an effective and efficient model termed as the Integrated Intrusion Detection and Prevention System (IDPS) which combines both IDS and IPS in a single mechanism. Our mechanism also integrates two techniques namely, Anomaly Detection (AD) and Signature Detection (SD) that can work in cooperation to detect various numbers of attacks and stop them through the capability of IPS.

Item Type:	Article (Journal)
Additional Information:	6481/22263
Uncontrolled Keywords:	Intrusion detection system, Cloud Computing, Computer attacks, Network Security, Information security, NIDS, Cloud IDPS, HIDS, Privacy.
Subjects:	Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Kulliyyahs/Centres/Divisions/Institutes (Can select more than one option. Press CONTROL button):	Kulliyyah of Information and Communication Technology > Department of Computer Science Kulliyyah of Information and Communication Technology > Department of Computer Science
Depositing User:	Dr. Al-Sakib Khan Pathan
Date Deposited:	12 Sep 2012 08:02
Last Modified:	13 Jun 2014 15:26
URI:	http://irep.iium.edu.my/id/eprint/22263

Actions (login required)

View Item