3D-IDS: IaaS User-oriented Intrusion Detection System
Jie He, Chuan Tang, Yuexiang Yang, Yong Qiao, Chaobin Liu · 2012
Being the core technology of IaaS (Infrastructure as a Service) cloud computing data center, server virtualization can virtualize servers with surplus resources to multiple virtual machines with diverse configurations according to users' demands. This can significantly improve the utilization of computing resources. Traditional intrusion detection techniques are no longer suitable for security detection of IaaS cloud computing data centers any more due to the specificity of IaaS architecture. Furthermore, most current intrusion detection systems (IDS) for cloud environment are provider-oriented. It's hard for IaaS users to obtain the statuses of virtual machines rented by them. In this paper, we designed a three-dimensional intrusion detection system (3D-IDS). Through a distributed collection of information on virtual machines, such as system logs, host behaviors and network behaviors, our system can synthesize related information to supply detailed security statuses of each virtual machine for IaaS users.