Abstract
Intrusion Detection Systems allow detection of unwanted attempts accessing which can violate security policy, manipulation or disabling of computer systems through the Internet. IDS plays a vital role in securing cloud data centers. This paper introduces an analytical model based on embedded Markov chain to analyze the packet processing using Bro IDPS (Intrusion Detection Prevention System). In this paper, we combine the preventive and detective rules to find a trade-off between network performance and security. We focus on how to enhance the detection engine and to predict the attack signatures taking into account of average service time, packet loss and blocking probability.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Similar content being viewed by others
References
Ambikavathi, C., Srivatsa, S.K.: Integrated intrusion detection approach for cloud computing. Indian J. Sci. Technol. 9, 1–5 (2016)
Doelitzscher, F., Reich, C., Knahl, M., Passfall, A., Clarke, N.: An agent based business aware incident detection system for cloud environments. J. Cloud Comput. Adv. Syst. Appl. 1, 1 (2012)
Langin, C., Rahimi, S.: Soft computing in intrusion detection: the state of the art. J. Ambient Intell. Humanized Comput. 1(2), 133–145 (2010)
Patel, A., Taghavi, M., Bakhtiyari, K., Júnior, J.C.: An intrusion detection and prevention system in cloud computing: a systematic review. J. Netw. Comput. Appl. 36(1), 25–41 (2013)
Alsubhi, K., Bouabdallah, N., Boutaba, R.: Performance analysis in intrusion detection and prevention systems. In: 12th IFIP/IEEE Integrated Network Management Symposium (IM), pp. 369–376. Trinity College Dublin, Ireland (2011)
Lee, W., Cabrera, J.B.D., Thomas, A., Balwalli, N., Saluja, S., Zhang, Y.: Performance adaptation in real-time intrusion detection systems. In: Wespi, A., Vigna, G., Deri, L. (eds.) RAID 2002. LNCS, vol. 2516, pp. 252–273. Springer, Heidelberg (2002). doi:10.1007/3-540-36084-0_14
Hess, A., Geerdes, H., Wessaly, R.: Intelligent distribution of intrusion prevention services on programmable routers. In: 25th IEEE INFOCOM, Barcelona, Spain. Citeseer (2006)
Salah, K., Elbadawi, K., Boutaba, R.: Performance modeling and analysis of network firewalls. IEEE Trans. Netw. Serv. Manage. 9, 12–21 (2012)
Modi, C., Patel, D., Borisaniya, B., Patel, H., Patel, A., Rajarajan, M.: A survey of intrusion detection techniques in cloud. J. Netw. Comput. Appl. 36(1), 42–57 (2013)
El Mir, I., Kim, D.S., Haqiq, A.: Security modeling and analysis of an intrusion tolerant cloud data center. In: Third World Conference on Complex Systems (WCCS), pp. 1–6. IEEE, Marrakech (2015)
El Mir, I., Kim, D.S., Haqiq, A.: Security modeling and analysis of a self-cleansing intrusion tolerance technique. In: 11th International Conference on Information Assurance and Security (IAS), pp. 110–116, IEEE, Marrakech (2015)
El Mir, I., Kim, D.S., Haqiq, A.: Cloud computing security modeling and analysis based on a self-cleansing intrusion tolerance technique. J. Inf. Assur. Secur. (JIAS) 11, 273–282 (2016)
Paxson, V.: Bro: a system for detecting network intruders in real-time. Comput. Netw. 31, 2435–2463 (1999)
Kacha, C.C., Shevade, K.K., Raghuwanshi, K.S.: Improved snort intrusion detection system using modified pattern matching technique. Int. J. Emerg. Technol. Adv. Eng. 3(7), 81–88 (2013)
Acknowledgments
This research work is supported by the NATO Multi Year Project entitled Cyber Security Analysis and Assurance using Cloud-Based Security Measurement System with the code: SPS-984425.
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2017 Springer International Publishing AG
About this paper
Cite this paper
El Mir, I., Haqiq, A., Kim, D.S. (2017). Performance Analysis and Security Based on Intrusion Detection and Prevention Systems in Cloud Data Centers. In: Abraham, A., Haqiq, A., Alimi, A., Mezzour, G., Rokbani, N., Muda, A. (eds) Proceedings of the 16th International Conference on Hybrid Intelligent Systems (HIS 2016). HIS 2016. Advances in Intelligent Systems and Computing, vol 552. Springer, Cham. https://doi.org/10.1007/978-3-319-52941-7_45
Download citation
DOI: https://doi.org/10.1007/978-3-319-52941-7_45
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-319-52940-0
Online ISBN: 978-3-319-52941-7
eBook Packages: EngineeringEngineering (R0)