Till All Are One: Towards a Unified Cloud IDS

Pitropakis, Nikolaos; Lambrinoudakis, Costas; Geneiatakis, Dimitris

Abstract

Recently there is a trend to use cloud computing on service deployment, enjoying various advantages that it offers with emphasis on the economy which is achieved in the era of the financial crisis. However, along with the transformation of technology, several security issues are raised and especially the threat of malicious insiders. For instance, insiders can use their privileged position to accomplish an attack against the cloud infrastructure. In this paper we introduce a practical and efficient intrusion detection system solution for cloud based on the advantages of CUDA technology. The proposed solution audits the deployed virtual machines operation, and correlates the collected information to detect uncommon behavior based on Smith-Waterman algorithm. To do so, we collect the system calls of cloud virtual machines and compare them with pre-defined attack signatures. We implement the core of the detection module both sequentially and in parallel on CUDA technology. We evaluate our solution on experimental CUDA enabled cloud system in terms of performance using well known attack patterns. Results indicate that our approach improve highly the efficiency of detection in terms of processing time compared to a sequential implementation.

Citation

Pitropakis, N., Lambrinoudakis, C., & Geneiatakis, D. (2015, September). Till All Are One: Towards a Unified Cloud IDS. Presented at International Conference on Trust and Privacy in Digital Business TrustBus 2015: Trust, Privacy and Security in Digital Busines, Valencia, Spain

• Presentation Conference Type: Conference Paper (published)
• Conference Name: International Conference on Trust and Privacy in Digital Business TrustBus 2015: Trust, Privacy and Security in Digital Busines
• Start Date: Sep 1, 2015
• End Date: Sep 2, 2015
• Acceptance Date: Sep 1, 2015
• Online Publication Date: Aug 5, 2015
• Publication Date: Aug 5, 2015
• Deposit Date: Sep 21, 2018
• Electronic ISSN: 1611-3349
• Publisher: Springer
• Pages: 136-149
• Series Title: Lecture Notes in Computer Science
• Series Number: 9264
• Series ISSN: 0302-9743
• Book Title: Trust, Privacy and Security in Digital Business; Lecture Notes in Computer Science
• ISBN: 9783319229058; 9783319229065
• DOI: https://doi.org/10.1007/978-3-319-22906-5_11
• Keywords: Cloud computing, security, malicious insider, IDS, system calls, Smith Waterman, CUDA
• Public URL: http://researchrepository.napier.ac.uk/Output/1304052