Large-Scale Coordinated attacks: Impact on the Cloud Security

Abstract

To cite this version:Damien Riquet, Gilles Grimaud, Michaël Hauspie. Large-scale coordinated attacks : Impact on the cloud security. Abstract-Cloud Computing has emerged as a model to process large volumetric data. Though Cloud Computing is very popular, cloud security could delay its adoption. Security of the cloud must provide data confidentiality and protection of resources. Such architecture seems to be vulnerable when confronted to distributed attacks also known as large-scale coordinated attacks.In this paper, we study the impact of large-scale coordinated attacks on Cloud Computing and its current security solutions.We experiment the open-source IDS Snort and a commercialized firewall using distributed portscan. Our results show that these security solutions are not designed to detect distributed attacks. Indeed, an attacker who controls about 32 hosts can easily achieve a distributed portscan without being detected.

A Survey of Denial-of-Service and Distributed Denial of Service Attacks and Defenses in Cloud Computing

“…Riquet et al [21] study the impact of DDoS attacks on Cloud Computing with a defense such as an IDS (snort [22]) and a commercial firewall. Their experiments show that distributed attacks remain undetected, even with security solutions.…”

Appraisal of the Most Prominent Attacks due to Vulnerabilities in Cloud Computing

“…al., in [27] discussed coordinated attacks on a large scale and its impact on the cloud. The Firewalls and Intrusion Detection System are used for security using port scan.…”

“…The general architecture of cloud can be described as the authentication server, which authenticates the user, the second is a user, which uses the services and third is the servers that provide services to the user. The user authenticates himself through an authentication server, and after the successful authentication, the user gets permeation to use the services provided by the server [8][9].…”

Implementation of User Authentication as a Service for Cloud Network

“…al., [13] discussed Firewall, intrusion detection and coordinated attacks on the cloud on a large scale. The authorized traffic defined by the security policy is filtered through the firewall.…”