Detection And Prevention System For Cloud Infrastructure

Since the onset of the first packet switching event that many believe to be beginning of the internet, no other technology besides the printing press has ever transformed the ability to deliver information. Although the internet is used by a large percentage of the civilized world, few Americans realize how vital cyberspace is to our national infrastructure. Today, we are faced with even more threats although it has been a recognized problem since 2009, when President Barrack Obama said “The cyber threat is one of the most serious economic and national security challenges we face as a nation. It’s also clear that we’re not as prepared as we should be, as a government or as a country (Obama, 2009).” Every industry that operates in the United States is dependent on the internet for some aspect of their business. Commerce, transportation, financial institutions, military, as well as industrial control systems are all interconnected. This interconnectedness has created vulnerabilities within their infrastructure that have increasingly become targets of terrorists, script kiddies, foreign governments and hackers of all types.

With the Age of technology advancing, the more cyber-attacks are occurring. Many of our information are on computer networks and we like to think that our information is well protect. But how protected is our information? Cybersecurity bills are introduced in Congress almost every year. These bills regularly imply to permit organizations and the government to divulge dangerous information for a “cybersecurity” reason to secure and safeguard against attacks against networks and computer systems.

Evaluations of computer security published since July 1999 continue to show that federal computer security is fraught with weaknesses and that, as a result, critical operations and assets continue to be at risk. As in 1998, our current analysis identified significant weaknesses in each of the 24 agencies covered by our review. Since July 1999, the range of weaknesses in individual agencies has broadened, at least in part because the scope of audits being performed is more comprehensive than in prior years. While these audits are providing a more complete picture of the security problems agencies face, they also show that agencies have much work to do to ensure that their security programs are

Dougherty, C., Householder, A., & Houle, K. (2002). Computer attack trends challenge Internet security. Computer, 35(4), 0005-7.

People across the world are becoming disproportionately dependent on modern day technology, which results in more vulnerability to cyber-attacks including cybersecurity breaches. Today, the world continues to experience inordinate cases of cybersecurity meltdowns. There is a rapid growth in complexity and volume of cyber-attacks, and this undermines the success of security measures put in place to make the cyberspace secure for users. Cyber-attacks on both private and public information systems are a major issue for information security as well as the legal system. While most states require government organizations and certain federal vendors to report incidences of data breaches, no equivalent legislation exists to cover private entities.

The enormous growth of computer networks usage and the huge increase in the number of applications running on top of it, network security is becoming an important issue. Moreover, almost all computer systems suffer from security vulnerabilities which are both technically difficult and economically costly to be solved by the manufacturers. Therefore, the role of the Intrusion Detection Systems (IDSs), as special purpose devices to detect anomalies and attacks in the network, is becoming more important.

In 1980, James Anderson’s paper, Computer Security Threat Monitoring and Surveillance, bore the notion of intrusion detection. Through government funding and serious corporate interest allowed for intrusion detection systems(IDS) to develope into their current state. So what exactly is IDS? An IDS is used to detect malicious network traffic and computer usage through attack signatures. The IDS watches for attacks not only from incoming internet traffic but also for attacks that originate in the system. When a potential attack is detected the IDS logs the information and sends an alert to the console. How the alert is detected and handled at is dependent on the type of IDS in place. Through this paper we

(Muhanty & Rao, (2008)) Describe the act of computer intrusion as any unauthorized attempt to access or damage or malicious use of information resources (Muhanty & Rao, (2008)). According to (Muhanty & Rao, (2008)), Intrusion detection deals with fast detection of unwanted violations in system 's normal behavior due to illegal actions (attacks) carried out by malicious users (Muhanty & Rao, (2008)). Individuals and organizations who use computers and the internet will need to have protection to keep their personal computers,

Attacks can be classified as “known attacks” or “anomaly based”. Some attacks have signature similar to previous attacks others are novel and may have no common signature. To deal with such variation different techniques are incorporated. Thus, we can say IDS (intrusion detection system) can be classified into 2 main categories. One that uses the signature of previous attacks to estimate or detect intrusion other that checks for anomalies. Both have their limitations and advantages. Biggest limitation of anomaly system is false reports. Thus a third type of system also exists, Hybrid, which uses both the previous two to detect Intrusions.

Cloud computing security is that the combination of control-based technologies like network security, pc security, info security and policies designed to bind the restrictive compliance rules. it 's primarily wont to shield info, knowledge applications and infrastructure related to cloud computing use. The zoom in field of “cloud computing” has multiplied severe security issues like securing knowledge, and examining the use of cloud by the cloud computing vendors. the most plan is to spot the foremost dangerous security threats in cloud

Cloud computing has become so famous; there is much widespread news about the cloud these days. This is mainly because of the exponential shift of the business applications from traditional models of software towards the Internet, and now through mobile devices. Cloud computing is a model that uses the network of remote servers that has been hosted on the internet rather than on a specific hardware. This would enable a better shared pool for storing, accessing and processing of data. With the huge information being available in the internet, the security for cloud computing has been challenging and this paper would elucidates the security threats of cloud computing also stating the possible countermeasures for them.

Abstract: Providing security in a distributed system is important as cloud computing provides variety of convenient services. IDS implementation in cloud requires an efficient, scalable and a constructive approach. Many Network-based intrusion detection systems(NIDS) are used for the reception of packets from the cloud, but those systems possess lower detection rate, high false positive rate and they fail to resist single point attack. I would like to propose one method which I encountered and found out to be efficient compared to other methods. This unique model has multiple intrusion detection systems (IDSs) that are deployed in each layer of the cloud infrastructure for protecting each Virtual Machine against threats. Another catching feature is that of cloud alliance concept which exchanges mutual alerts to resist the single point attack of failure.

We imagine that the combination of these security features will provide high level of security for the Cloud. currently no other system can provide this level of security .We have used these concepts to notice illegal data access to data stored on a local file system by masqueraders, i.e. attackers who copy valid users after theft their identification .Our trial results in a local file system setting show that combining both techniques can produce better results, and our results advise that this approach may work in a Cloud environment, as the Cloud is proposed to be as clear to the user as a local file system. In the following we analysis briefly some of the trial results achieved by using this approach to detect masquerade activity in a local file setting.[11]

Intrusion can be defined as the actions that attempt to compromise the integrity, confidentiality, or availability of a computer resource [1]. Intrusion Detection System is a software or device to discover the intrusion activity. Based on detection process, IDS can be classified into two groups: Anomaly detection, and misuse/signature detection. Anomaly detection looks for rare or unusual network activities, while misuse/signature detection uses past well-known attack patterns—signature--to identify illegal activities. This paper deals with only misuse/signature detection in computer networks. Network attack types can be categorized into the following groups:

J. Rameshbabu et al. [1] described the major DDOS attacks that were launched in cloud environment in different years. So the task is to defeat the DDOS attack in cloud environment. A technique NEIF (Network Egress and ingress Filtering) is proposed to overcome the issue. This technique uses the ingress filters as well as the egress filters at the ISP’s edge router. That monitors the incoming and outgoing traffic in the network. As a result of implementing NEIF technique the Throughput is improved and the connection delay is reduced. The limitation of the technique is that the ingress filters fail if the attacker has access to the IP address of authorized system which will than allow every packet to pass through the network.