DIAGNOSING AND COUNTERACTING NETWORK THREATS
Alexander Terentyev, Olena Dolya, Tamara Lyashchenko, Oleh Kuzminskyi · Management of Development of Complex Systems · 2020
Information security in cloud services is one of the most important issues that has attracted much research and development over the last few years. In particular, attackers can investigate the vulnerabilities of the cloud system and compromise virtual machines to deploy further large-scale distributed malware (DDoS). DDoS attacks typically include early-stage actions such as multi-stage exploitation, low-frequency vulnerability scanning, and compromising of identified vulnerable virtual machines as subordinate, and finally DDoS attacks through compromised virtual machines. In a cloud system, especially infrastructure-as-a-service (IaaS) clouds, detecting attacks from such slave machines is extremely difficult. This is because cloud users can install vulnerable programs on their virtual machines. To avoid the compromise of vulnerable virtual machines in the cloud, a multiphase mechanism for detecting, measuring and selecting a countermeasure based on analytical models based on well-established countermeasures based on a virtual network is proposed. System and safety assessments demonstrate the effectiveness and efficiency of the proposed solution.