A survey on gaps, threat remediation challenges and some thoughts for proactive attack detection in cloud computing

Khorshed, Md. Tanzim; Ali, Anwaar; Wasimi, Saleh A.

doi:10.1016/j.future.2012.01.006

Cited by 262 publications

(115 citation statements)

References 33 publications

Supporting

Mentioning

101

Contrasting

Unclassified

Order By: Relevance

Section: The Conceptual Model Of Cloud Service Brokering System mentioning

confidence: 99%

“…New cloud customer needs the security and trust certificate or report of these providers for making a decision to choose the right provider in terms of reliability, security and trustworthiness. So, clearly security issues are the most significant issue which is impeding the growth of mobile cloud computing [18] [19].However, few ranked systems are available in service provisioning or performance issues but not adequate cloud service provider security ranking system is currently available.In front of the several security issues [20] [21], we need to have some sort of monitoring, assurance and trust which not only come from the cloud service provider but also from a trusted cloud brokering system as shown in Fig. 1.…”

mentioning

confidence: 99%

See 1 more Smart Citation

A MAS-Based Cloud Service Brokering System to Respond Security Needs of Cloud Customers

Talbi¹,

Haqiq²

2017

IJIMAI

View full text Add to dashboard Cite

-Cloud computing is becoming a key factor in computer science and an important technology for many organizations to deliver different types of services. The companies which provide services to customers are called as cloud service providers. The cloud users (CUs) increase and require secure, reliable and trustworthy cloud service providers (CSPs) from the market. So, it's a challenge for a new customer to choose the highly secure provider. This paper presents a cloud service brokering system in order to analyze and rank the secured cloud service provider among the available providers list. This model uses an autonomous and flexible agent in multi-agent system (MASs) that have an intelligent behavior and suitable tools for helping the brokering system to assess the security risks for the group of cloud providers which make decision of the more secured provider and justify the business needs of users in terms of security and reliability.Keywords -Cloud Computing, Brokering System, Multi-agent System, Security Risk.I. InTROducTIOn c lOud computing [1] is a new paradigm of utility computing and enormously growing phenomenon in the present IT industry hype .Many companies, enterprises and organizations outsource some of their information systems to benefit from the cloud services which are Platform as a Service (PaaS), Infrastructure as a Service (IaaS) and Software as a Service (SaaS). The main interesting features of a cloud are the cost decrease and a faster time to market. Based on sharing resources, the cloud computing changes the user concerns from managing an infrastructure to only focusing on their core business. Currently there are many numbers of providers, but finding the best cloud service provider is difficult. Thus, it is a challenge for the users to choose the more secured cloud provider for fulfilling their requirements.Nowadays, a few efforts have been devoted to building tools and frameworks that can permit customers to evaluate cloud offerings and rank them based on their ability to meet the user's quality of service (QoS) and security requirements. This is a major problem for every user, especially those who are more concerned about data security and privacy from CSP. For this purpose, cloud brokers [2] have emerged; they can help cloud consumers to select adequate solutions by comparing existing offers, essentially against their prices.A secure computer system provides guarantees regarding the confidentiality, integrity, availability, non-repudiation and authenticity of its objects (such as data, processes or services). Security is related to vulnerabilities in software, and these are hard to foresee or detect before an actual attack; security involves personal aspects (e.g., user or operator issues) and aspects of the operational environment that are often beyond the control of the development teams. As cloud computing presents new kinds of security risks [3], [4], they need to be treated before wider adoption. Accordingly, we have to dispose a system that measure and rank the secured c...

show abstract

Section: The Conceptual Model Of Cloud Service Brokering System mentioning

confidence: 99%

mentioning

confidence: 99%

A MAS-Based Cloud Service Brokering System to Respond Security Needs of Cloud Customers

Talbi¹,

Haqiq²

2017

IJIMAI

View full text Add to dashboard Cite

show abstract

“…The term 'Cloud computing' has been defined by many researchers and experts. It is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction (Khorshed et al, 2012). Indeed, Cloud computing is a metaphor which refers to a set of characteristics such as resource sharing, multi-tenancy, virtualization, elasticity, pay-as-you-go and on-demand services.…”

Section: Cloud Computingmentioning

confidence: 99%

“…Among these challenges, security is the most significant challenge which can cause a serious threat to users' assets (Khorshed et al, 2012). Due to the high usage of encryption in Cloud environment, security issues of encrypted traffic are concerned in this research.…”

Section: Cloud Computingmentioning

confidence: 99%

Intrusion Detection System in Secure Shell Traffic in Cloud Environment

Barati¹,

Abdullah²,

Udzir³

et al. 2014

Journal of Computer Science

View full text Add to dashboard Cite

Due to growth of Cloud computing usage, the need to apply encrypted protocols to provide confidentiality and integrity of data increases dramatically. Attacker can take advantage of these protocols to hide the intrusion and evade detection. Many traditional attack detection techniques have been proposed to provide security in the networks but none of them can be implemented properly in encrypted networks. This study investigates a popular attack in Secure Shell (SSH), known as brute force attack and provides an efficient method to detect this attack. Brute force attack is launched by implementing a client-server SSH model in a private Cloud environment and the traffics regarding attack and normal are captured on the server. Then, representative features of traffic are extracted and used by the Multi-Layer Perceptron model of Artificial Neural Network to classify the attack and normal traffic. Results gained by this method show that the proposed model is successfully capable to detect this attack with high accuracy and low false alarm.

show abstract

“…Authors of [148] test a cloud traceback model using back propagation neural network called Cloud Protector, which is trained to detect and filter DDoS attack traffic in cloud environment. More studies on DDoS related issues in cloud computing environments can be found in [149][150][151][152][153].…”

Section: Ddos Defense In Cloud Computing Environmentmentioning

confidence: 99%

A Survey on DDoS Attack and Defense Strategies: From Traditional Schemes to Current Techniques

Aamir

Zaidi

2013

IIS

View full text Add to dashboard Cite

Distributed Denial of Service (DDoS) attacks exhaust victim's bandwidth or services. Traditional architecture of Internet is vulnerable to DDoS attacks and an ongoing cycle of attack & defense is observed. A recent attack report of year 2013 -'Quarter 1' from Prolexic Technologies identifies that 1.75 percent increase in total number of DDoS attacks has been recorded as compared to similar attacks of previous year's last quarter. In this paper, different types and techniques of DDoS attacks and their countermeasures are surveyed. The significance of this paper is the coverage of many aspects of countering DDoS attacks including new research on the topic. We survey different papers describing methods of defense against DDoS attacks based on entropy variations, traffic anomaly parameters, neural networks, device level defense, botnet flux identifications, application layer DDoS defense and countermeasures in wireless networks, CCN & cloud computing environments. We also discuss some traditional methods of defense such as traceback and packet filtering techniques, so that readers can identify major differences between traditional and current techniques of defense against DDoS attacks. We identify that application layer DDoS attacks possess the ability to produce greater impact on the victim as they are driven by legitimate-like traffic, making it quite difficult to identify and distinguish from legitimate requests. The need of improved defense against such attacks is therefore more demanding in research. The study conducted in this paper can be helpful for readers and researchers to recognize better techniques of defense in current times against DDoS attacks and contribute with more research on this topic in the light of future challenges identified in this paper.

show abstract

A survey on gaps, threat remediation challenges and some thoughts for proactive attack detection in cloud computing

Cited by 262 publications

References 33 publications

A MAS-Based Cloud Service Brokering System to Respond Security Needs of Cloud Customers

A MAS-Based Cloud Service Brokering System to Respond Security Needs of Cloud Customers

Intrusion Detection System in Secure Shell Traffic in Cloud Environment

A Survey on DDoS Attack and Defense Strategies: From Traditional Schemes to Current Techniques

Contact Info

Product

Resources

About