Towards intrusion-resilient security monitoring in multi-cloud infrastructures

Abstract

Multi-cloud architectures enable the design of resilient distributed service applications. Such applications can bene t from a combination of intrusion-tolerant replication across clouds with intrusion detection and analysis mechanisms. Such mechanisms enable the detection of attacks that a ect multiple replicas and thus exceed the intrusion masking capability, and in addition support fast reaction and recovery from local intrusions. In this work-in-progress paper we present a security analysis on which an intrusion detection and analysis service can be based on. We sketch the architecture of such a cross-cloud intrusion detection architecture that combines a set of wellknown mechanisms. The goal of our approach is obtaining a resource-e cient service with optimal resilience against malicious attacks.