A Deep Understanding of Cloud Computing Security

Li, Hongjiao; Tian, Xin; Wei, Weimin; Sun, Chaochao

doi:10.1007/978-3-642-35211-9_13

Cited by 4 publications

(3 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Virtualization is a core technology in cloud computing and an essential element for a cloud to achieve its characteristics, especially scalability, location independence, and resource pooling. In a virtual environment, multiple Operating Systems (OSs) run at the same time on a single host computer using a hypervisor (also called Virtual Machine Monitor (VMM)) [123], and physical servers contain multiple virtualized servers on which several virtual machine instances may be running [97,77].…”

Section: Cloud Security Issues Based On Different Layers Virtualization Level Security Issuesmentioning

confidence: 99%

“…Moreover, it offers methods to estimate both the number and locations for the multiple change points simultaneously without a priori knowledge of them. Specifically, we use the ECP implementation of the E-divisive algorithm and call it E-Div throughout the thesis [77].…”

Section: Change Point Analysismentioning

confidence: 99%

“…As mentioned earlier, we use the E-Divisive implementation of the ECP [77]. The E-Divisive algorithm is defined as E − Div((X i ) i=T i=1 , (m, α, s, r)), a function that returns a set of change points, and takes the following input parameters:…”

Section: Change Point-based Intrusion Detectionmentioning

confidence: 99%

See 2 more Smart Citations

Cloud Slicing a new architecture for cloud security monitoring

Aldribi

Traoré

Letourneau

2015

2015 IEEE Pacific Rim Conference on Communications, Computers and Signal Processing (PACRIM)

View full text Add to dashboard Cite

The adoption of cloud computing has increased dramatically in recent years due to attractive features such as flexibility, cost reductions, scalability, and pay per use. Shifting towards cloud computing is attracting not only industry but also government and academia. However, given their stringent privacy and security policies, this shift is still hindered by many security concerns related to the cloud computing features, namely shared resources, virtualization and multi-tenancy. These security concerns vary from privacy threats and lack of transparency to intrusions from within and outside the cloud infrastructure. Therefore, to overcome these concerns and establish a strong trust in cloud computing, there is a need to develop adequate security mechanisms for effectively handling the threats faced in the cloud. Intrusion Detection Systems (IDSs) represent an important part of such mechanisms. Developing cloud based IDS that can capture suspicious activity or threats, and prevent attacks and data leakage from both inside and outside the cloud environment is paramount. However, cloud computing is faced with a multidimensional and rapidly evolving threat landscape, which makes cloud based IDS more challenging. Moreover, one of the most significant hurdles for developing such cloud IDS is the lack of publicly available datasets collected from a real cloud computing environment. In this dissertation, we introduce the first public dataset of its kind, named ISOT Cloud Intrusion Dataset (ISOT-CID), for cloud intrusion detection. The dataset consists of several terabytes of data, involving normal activities and a wide variety of attack vectors, collected over multiple phases and periods of time in a real cloud environment. We also introduce a new hypervisor-based cloud intrusion detection system (HIDS) that uses online multivariate statistical change analysis to detect anomalous network behaviors. As a departure from the conventional monolithic network IDS feature model, we leverage the fact that a hypervisor consists of a collection of instances, to introduce an instance-oriented feature model that exploits individual as well as correlated behaviors of instances to improve the detection capability. The proposed approach is evaluated using ISOT-CID and the experiments along with results are presented.

show abstract

Section: Cloud Security Issues Based On Different Layers Virtualization Level Security Issuesmentioning

confidence: 99%

Section: Change Point Analysismentioning

confidence: 99%

See 1 more Smart Citation

Cloud Slicing a new architecture for cloud security monitoring

Aldribi

Traoré

Letourneau

2015

2015 IEEE Pacific Rim Conference on Communications, Computers and Signal Processing (PACRIM)

View full text Add to dashboard Cite

show abstract

Cloud Security Using Ear Biometrics

Kumar

Abidi

Singh

2015

Handbook of Research on Security Considerations in Cloud Computing

View full text Add to dashboard Cite

Cloud computing has created much enthusiasm in the IT world, institutions, business groups and different organizations and provided new techniques to cut down resource costs and increase its better utilization. It is a major challenge for cloud consumers and service providers equally. Establishing one's identity has become complicated in a vastly interconnected cloud computing network. The need of a consistent cloud security technique has increased in the wake of heightened concerns about security. The rapid development in cloud data storage, network computing services, accessing the cloud services from vendors has made cloud open to security threats. In this chapter, we have proposed an approach based on Ear Biometric for cloud security of individual consumers and vendors. This approaches started to get acceptance as a genuine method for determining an individual's identity. This chapter provides with the stepping stone for future researches to unveil how biometrics can change the cloud security scenario as we know it.

show abstract