Intrusion Detection and Countermeasure of Virtual Cloud Systems - State of the Art and Current Challenges

Abstract

Abstract-Clouds are distributed Internet-based platforms that provide highly resilient and scalable environments to be used by enterprises in a multitude of ways. Cloud computing offers enterprises technology innovation that business leaders and IT infrastructure managers can choose to apply based on how and to what extent it helps them fulfil their business requirements. It is crucial that all technical consultants have a rigorous understanding of the ramifications of cloud computing as its influence is likely to spread the complete IT landscape. Security is one of the major concerns that is of practical interest to decision makers when they are making critical strategic operational decisions. Distributed Denial of Service (DDoS) attacks are becoming more frequent and effective over the past few years, since the widely publicised DDoS attacks on the financial services industry that came to light in September and October 2012 and resurfaced in the past two years. In this paper, we introduce advanced cloud security technologies and practices as a series of concepts and technology architectures, from an industry-centric point of view. This is followed by classification of intrusion detection and prevention mechanisms that can be part of an overall strategy to help understand identify and mitigate potential DDoS attacks on business networks. The paper establishes solid coverage of security issues related to DDoS and virtualisation with a focus on structure, clarity, and well-defined blocks for mainstream cloud computing security solutions and platforms. In doing so, we aim to provide industry technologists, who may not be necessarily cloud or security experts, with an effective tool to help them understand the security implications associated with cloud adoption in their transition towards more knowledge-based systems.

Internet of Things Security: A review on the RFID contactless security protocols

“…Security and privacy issues are a major vulnerability to any technology, this can become quite serious if not treated correctly by adopting the appropriate methods [15], [16], [17], [18], [19], [20]. It has been known in recent years that RFID contactless cards have one of the most serious vulnerabilities due to the accessibility of RFID readers that can be bought online.…”

Data security issues in the realm of mobile cloud computing: A survey

“…These industries include; the gaming, healthcare, and education industries. Mobile gaming can now off-load computational power to the cloud [18], meaning users no longer need powerful devices to be able to run games and can essentially just use the mobile device as a thin-client with the computation and graphics rendering done entirely via the cloud [9,20].…”

“…In short Cloud Computing offers various services (e.g. IAAS, PAAS and SAAS) to Mobile Computing as a means to tackle the issue of lack of storage space and processing power most mobile devices offer; which have a tremendous impact on service quality [9].…”

Data security issues in the realm of mobile cloud computing: A survey

“…Both [9,38] state that availability of data is more of an important issue within the realm of Mobile Cloud Computing than it is in wired networks when dealing with Cloud Computing. Users that are using 'mobile' hand held devices may not be able to access the cloud to obtain a service due to factors like traffic congestion, network failure, and the out of signal issue.…”

“…Another possible mechanism which resolves the issues of the above mechanism is provided by [40] and also stated in [9]. Suggests a WIFI based multi-hop networking system known as 'MoNet' as well as a distributed content sharing protocol for the issue as well as without any infrastructure.…”