The research of intrusion detection system in cloud computing environment

Abstract

A variety of convenient services have been provided by cloud computing to end users. So providing safe and reliable service assurance is quiet important. Many Network-based intrusion detection systems (NIDS) are used to obtain the packets from the cloud. It has lower detection rate, higher false-positive rate and is unable to resist the single point attack of failure. In this paper, multiple intrusion detection systems (IDSs) are deployed in each layer of cloud infrastructure for protecting each Virtual Machine (VM) against threats. We also propose the cloud alliance concept by the communication agents exchanging the mutual alerts to resist the single point attack of failure. The simulation results indicate that the proposed system have a higher detection rate, lower false-positive rate and can resist the single point attack of failure. © Springer-Verlag Berlin Heidelberg 2011.