Towards Targeted Intrusion Detection Deployments in Cloud Computing
Norman Ahmed, Bharat Bhargava · INTERNATIONAL JOURNAL OF NEXT-GENERATION COMPUTING · 2015
Preventing security violation incidents or collecting dependable system audit trails for post incidents requires successfully detecting anomaly-based abnormal or intrusion activities. However, properly positioning the necessary tools for maximum detection can be inelegant and limited for systems that can be formed and destroyed on demand, such as the cloud. In this paper, we present a simplified taxonomy to aid targeted intrusion detection system deployments in cloud platforms. To illustrate the effectiveness of the proposed approach, we show two stealthy intrusion schemes and a preventive and adoptable detection strategy using Virtual Machine Introspection in a realistic use case scenario.