First step towards preserving the privacy of cloud‐based IDS security policies

Kurek, Tytus; Lasoń, Artur; Niemiec, Marcin

doi:10.1002/sec.1272

Cited by 6 publications

(8 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In turn, the results achieved in Solution III in the private cloud are comparable to those achieved in the UNIPRIV. This means that the engine used by the UNIRPRIV in the private cloud achieves comparable performance results to the most performant engine presented by the authors …”

Section: Resultsmentioning

confidence: 69%

“…It is shown that the implementation of the DTE in software is fully justified. Finally, performance results of the UNIPRIV are compared with performance results of dedicated privacy‐preserving solutions for IDS service that were presented by the authors …”

Section: Resultsmentioning

confidence: 99%

“…Likewise, in 2015, the authors proposed and presented 3 privacy‐preserving solutions for signature‐based Intrusion Detection System (IDS) services . All the 3 solutions are also based on the hybrid cloud architecture and work on principles of performing all computationally expensive operations—pattern‐matching operations—in the public cloud.…”

Section: Related Workmentioning

confidence: 99%

“…Additional studies on firewall services were performed by Wei et al and Shi et al 17,18 Likewise, in 2015, the authors proposed and presented 3 privacy-preserving solutions for signature-based Intrusion Detection System (IDS) services. 19 All the 3 solutions are also based on the hybrid cloud architecture and work on principles of performing all computationally expensive operations-pattern-matching operations-in the public cloud. By performing decision-making operations in the private cloud, the confidentiality of the customer's security policy is maintained, thus guaranteeing the desired privacy level.…”

Section: Related Workmentioning

confidence: 99%

See 3 more Smart Citations

Universal privacy‐preserving platform for SecaaS services

et al. 2017

Self Cite

View full text Add to dashboard Cite

Summary With the rapid growth of the Security‐as‐a‐Service market, concerns about privacy in exposing customer security policies to Cloud Service Providers have become critical. To resolve these issues, several solutions have been proposed over the past few years, each for a different kind of security service. However, as the number of security services outsourced into a cloud continues to grow, the need for a unified solution has become significant. This article introduces and presents a universal privacy‐preserving platform for SecaaS services that is based on a hybrid cloud architecture for maintaining the confidentiality of the customer's security policy. It is shown that this platform can be applied to all security services whose security policies can be represented in the form of a decision tree. This includes the vast majority of existing cloud‐based security services. With the small number of computationally‐expensive operations performed in a private cloud, the solution also does not require the implementation of a performant security engine on the customer's premises, allowing full advantage to be taken of private cloud offloading. It is also shown that the platform achieves better performance results than other existing solutions of this type. These findings were confirmed by experimental results.

show abstract

Section: Resultsmentioning

confidence: 69%

Section: Resultsmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

See 2 more Smart Citations

Universal privacy‐preserving platform for SecaaS services

et al. 2017

Self Cite

View full text Add to dashboard Cite

show abstract

“…Thanks to such technologies as AT&T NBFWS or Virtela ESC, these can be outsourced to the cloud, resulting in significantly reduced management overhead, decreased Total Cost of Ownership (TCO), improved business agility, and so on [5]. However, because of a lack of mechanisms preventing the CSP from having an insight into the customer' firewall policy, there are still issues of information confidentiality and privacy [6][7][8][9].…”

Section: Introductionmentioning

confidence: 99%

Taking back control of privacy: a novel framework for preserving cloud-based firewall policy confidentiality

Kurek

Niemiec

Lasoń

2015

Int. J. Inf. Secur.

Self Cite

View full text Add to dashboard Cite

As the cloud computing paradigm evolves, new types of cloud-based services have become available, including security services. Some of the most important and most commonly adopted security services are firewall services. These cannot be easily deployed in a cloud, however, because of a lack of mechanisms preserving firewall policy confidentiality. Even if they were provided, the customer traffic flowing through the Cloud Service Provider infrastructure would still be exposed to eavesdropping and information gaining by performing analysis. To bypass these issues, the following article introduces a novel framework, known as the Ladon Hybrid Cloud, for preserving cloud-based firewall policy confidentiality. It is shown that in this framework, a high level of privacy is provided thanks to leveraging an anonymized firewall approach and a hybrid cloud model. A number of optimization techniques, which help to further improve the Ladon Hybrid Cloud privacy level, are also introduced. Finally, analysis performed on the framework shows that it is possible to find a trade-off between the Ladon Hybrid Cloud privacy level, its congestion probability, and efficiency. This argument has been demonstrated through the results of conducted experiments.

show abstract

Service delivery models of cloud computing: security issues and open challenges

Iqbal

Kiah

Anuar

et al. 2016

Security Comm Networks

View full text Add to dashboard Cite

Cloud computing represents the most recent enterprise trend in information technology and refers to the virtualization of computing resources that are available on demand. Cloud computing saves cost and time for businesses. Moreover, this computing process reflects a radical technological revolution in how companies develop, deploy, and manage enterprise applications over the Internet. Virtualized cloud computing mainly offers cloud‐computing delivery models such as software as a service, platform as a service, and infrastructure as a service. Security and privacy are presently considered critical factors in the adaptation of any cloud‐service delivery model. Cloud computing leverages several technologies; in the process, this model can inherit potential security threats. Thus far, security issues in cloud computing have rarely been addressed at the service delivery level. Key security concerns include Web application security, network security, data security, integration, vulnerabilities in the virtualized environment, and physical security. The aim of this research is to comprehensively present the security threats with respect to their cloud service deliver models. This study also determines how service delivery models differ from existing enterprise applications, classify these models, and investigate the inherent security challenges. This study primarily focuses on the security concerns of each layer of the cloud‐service delivery model, as well as on existing solutions and approaches. In addition, countermeasures to potential security threats are also presented for each cloud model. Copyright © 2016 John Wiley & Sons, Ltd.

show abstract

First step towards preserving the privacy of cloud‐based IDS security policies

Cited by 6 publications

References 21 publications

Universal privacy‐preserving platform for SecaaS services

Universal privacy‐preserving platform for SecaaS services

Taking back control of privacy: a novel framework for preserving cloud-based firewall policy confidentiality

Service delivery models of cloud computing: security issues and open challenges

Contact Info

Product

Resources

About