Detecting Intrusion in Cloud using Snort: An Application towards Cyber-Security
Fahmida Rafa, Zinnet Rahman, Md Mahbub Mishu, Morad Hasan, Raiyan Rahman, Dip Nandi · 2022
Internet, various kinds of services are delivered using cloud computing. These resources include storing data, servers, databases records, networking systems, and software. Many people choose cloud computing for businesses because of it’s budget-friendly, excellent efficiency and performance features. But lately, the intrusion on cloud-based system raised a significant concern for choosing this platform. Due to the increasing rate of computer networks and their usage, the global IT infrastructure is prone to attacks. If the issue is left unattended, it can cause significant trouble for IT sector. Intrusion detection systems are signature-based, means it would look in a certain type of data packet, and it would watch all the traffic in a network which has visibility to and make a decision if it is good traffic or bad. It alerts analyst to look at the traffic that could be malicious. Snort is an open-source intrusion detection system that can monitor any traffic going in or out of the network and also monitor malicious behavior or any violation. To enable secure and trustworthy information transmission across diverse cloud companies in today’s networked business settings, a high level of security is required. Because cyber-attacks are only getting more complicated these days, it is critical that defense technology keeps up. After traditional security technologies fail, an intrusion detection system functions as an adaptive safeguard device for system security. In our research, we have shown by using this protocol traffic from source 0.0.0.0:68 to DST 255.255.255:67 (UDP) is being blocked on our WAN. It prevents the user from obtaining a DHCP address.