Hypervisor-based cloud intrusion detection through online multivariate statistical change tracking

被引：49
作者：
Aldribi, Abdulaziz [1 ]
Traore, Issa [2 ]
Moa, Belaid [2 ]
Nwamuo, Onyekachi [2 ]
机构：
[1] Qassim Univ, Dept Comp Engn, Buraydah, Saudi Arabia
[2] Univ Victoria, Dept Elect & Comp Engn, Victoria, BC, Canada
来源：
COMPUTERS & SECURITY | 2020年 / 88卷
关键词：
Cloud computing; Cloud security monitoring; Hypervisor-based intrusion detection; Anomaly detection; Change detection; Multistage attacks; R-PACKAGE; ATTACKS; SYSTEM;
D O I：
10.1016/j.cose.2019.101646
中图分类号：
TP [自动化技术、计算机技术];
学科分类号：
0812 ;
摘要：
Cloud computing is facing a multidimensional and rapidly evolving threat landscape, making intrusion detection more challenging. This paper introduces a new hypervisor-based cloud intrusion detection system (IDS) that uses online multivariate statistical change analysis to detect anomalous network behaviors. As a departure from the conventional monolithic network IDS feature model, we leverage the fact that a hypervisor consists of a collection of instances, to introduce an instance-oriented feature model that exploits the individual and correlated behaviors of instances to improve the detection capability. The proposed approach is evaluated by collecting and using a new cloud intrusion dataset that includes a wide variety of attack vectors. (C) 2019 Elsevier Ltd. All rights reserved.
引用
收藏
页数：21
相关论文
共 50 条
  • [11] [Anonymous], [No title captured]
  • [12] [Anonymous], [No title captured]
  • [13] [Anonymous], [No title captured]
  • [14] [Anonymous], [No title captured]
  • [15] Arjunan K., 2017, ISEA Asia Secur. Priv. Conf. 2017, P1
  • [16] Intrusion damage assessment for multi-stage attacks for clouds
    Arshad, Junaid
    Azad, Muhammad Ajmal
    Jokhio, Imran Ali
    Townend, Paul
    [J]. IET COMMUNICATIONS, 2013, 7 (12) : 1304 - 1315
  • [17] Chou HH, 2015, INT CARN CONF SECU, P7
  • [18] Erdman C, 2007, J STAT SOFTW, V23, P1
  • [19] Guan YZ, 2009, 2009 INTERNATIONAL SYMPOSIUM ON WEB INFORMATION SYSTEMS AND APPLICATIONS, PROCEEDINGS, P84
  • [20] Attack Prediction Models for Cloud Intrusion Detection Systems
    Kholidy, Hisham A.
    Erradi, Abdelkarim
    Abdelwahed, Sherif
    [J]. 2014 2ND INTERNATIONAL CONFERENCE ON ARTIFICIAL INTELLIGENCE, MODELLING AND SIMULATION, 2014, : 270 - 275
12345