Collaborative IDS Framework for Cloud
Dinesh Kumar Singh, Dhiren Patel, Bhavesh Borisaniya, Chirag Modi · International journal of network security · 2016
Cloud computing is used extensively to deliver utility computing over the Internet. Defending network accessible Cloud resources and services from various threats and attacks is of great concern. Intrusion Detection System (IDS) has become popular as an important network security technology to detect cyber-attacks. In this paper, we propose a novel Collaborative IDS (CIDS) Framework for cloud. We use Snort to detect the known stealthy attacks using signature matching. To detect unknown attacks, anomaly detection system (ADS) is built using Decision Tree Classifier and Support Vector Machine (SVM). Alert Correlation and automatic signature generation reduce the impact of Denial of Service (DoS)/Distributed DoS (DDoS) attacks and increase the performance and accuracy of IDS.