A Virtual Machine Introspection in Cloud Computing for Intrusion Detection
Nida Kousar G · International Journal of Advanced Trends in Computer Science and Engineering · 2020
Cloud security is of paramount importance in the new era of computing.Advanced malware can hide their behavior on detection of the presence of a security tool at a tenant virtual machine (TVM).When the client and server exchange messages among each other, there is an activity that can be observed and tracked in detail of the activities that occur in a network that shows the, login and logout durations, the user's behavior etc.There are several types of attacks occurring from the internet.VM Guard applies the software breakpoint injection technique by storing the activities performed by the user on cloud-based ecommerce application and then habitat file is generated.From the habitat file Text Frequency and Inverse Document Frequency of the user actions is performed and then by applying random forest algorithm to classify the users into intruders and non-intruders.