NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment

Preeti Mishra; Emmanuel S. Pilli; Vijay Varadharajant; Udaya Tupakula

doi:10.1109/ICACCI.2016.7732025

NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment

Preeti Mishra, Emmanuel S. Pilli, Vijay Varadharajant, Udaya Tupakula

School of Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

26 Citations (Scopus)

Abstract

Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.

Original language	English
Title of host publication	2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016
Editors	Jinsong Wu, Gregorio Martinez Perez, Sabu M. Thampi, Mohammed Atiquzzaman, Stefano Berretti, Jeol J. C. P. Rodrigues, Raghuvir Tomar, Ravi Prakash Gorthi, Patrick Siarry, Al-Sakib Khan Pathan, Jie Li, Punam Bedi, Sameep Mehta, Mohamed Habib Kammoun, Vivek Jain
Place of Publication	Piscataway, NJ
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	56-62
Number of pages	7
ISBN (Electronic)	9781509020287
DOIs	https://doi.org/10.1109/ICACCI.2016.7732025
Publication status	Published - 2 Nov 2016
Event	5th International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016 - Jaipur, India Duration: 21 Sept 2016 → 24 Sept 2016

Other

Other	5th International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016
Country/Territory	India
City	Jaipur
Period	21/09/16 → 24/09/16

Keywords

Cloud Security
Intrusion Detection
Network Intrusions
Virtual Memory Introspection (VMI)

Access to Document

10.1109/ICACCI.2016.7732025

Cite this

Mishra, P., Pilli, E. S., Varadharajant, V., & Tupakula, U. (2016). NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. In J. Wu, G. Martinez Perez, S. M. Thampi, M. Atiquzzaman, S. Berretti, J. J. C. P. Rodrigues, R. Tomar, R. P. Gorthi, P. Siarry, A-S. Khan Pathan, J. Li, P. Bedi, S. Mehta, M. H. Kammoun, & V. Jain (Eds.), 2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016 (pp. 56-62). [7732025] Institute of Electrical and Electronics Engineers (IEEE). https://doi.org/10.1109/ICACCI.2016.7732025

Mishra, Preeti ; Pilli, Emmanuel S. ; Varadharajant, Vijay et al. / NvCloudIDS : A security architecture to detect intrusions at network and virtualization layer in cloud environment. 2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016. editor / Jinsong Wu ; Gregorio Martinez Perez ; Sabu M. Thampi ; Mohammed Atiquzzaman ; Stefano Berretti ; Jeol J. C. P. Rodrigues ; Raghuvir Tomar ; Ravi Prakash Gorthi ; Patrick Siarry ; Al-Sakib Khan Pathan ; Jie Li ; Punam Bedi ; Sameep Mehta ; Mohamed Habib Kammoun ; Vivek Jain. Piscataway, NJ : Institute of Electrical and Electronics Engineers (IEEE), 2016. pp. 56-62

@inproceedings{a10c268530f34000a0b0f4a73e6d0df7,

title = "NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment",

abstract = "Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.",

keywords = "Cloud Security, Intrusion Detection, Network Intrusions, Virtual Memory Introspection (VMI)",

author = "Preeti Mishra and Pilli, {Emmanuel S.} and Vijay Varadharajant and Udaya Tupakula",

year = "2016",

month = nov,

day = "2",

doi = "10.1109/ICACCI.2016.7732025",

language = "English",

pages = "56--62",

editor = "Jinsong Wu and {Martinez Perez}, Gregorio and Thampi, {Sabu M.} and Mohammed Atiquzzaman and Stefano Berretti and Rodrigues, {Jeol J. C. P.} and Raghuvir Tomar and Gorthi, {Ravi Prakash } and Patrick Siarry and {Khan Pathan}, Al-Sakib and Jie Li and Punam Bedi and Sameep Mehta and Kammoun, {Mohamed Habib} and Vivek Jain",

booktitle = "2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

note = "5th International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016 ; Conference date: 21-09-2016 Through 24-09-2016",

}

Mishra, P, Pilli, ES, Varadharajant, V & Tupakula, U 2016, NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. in J Wu, G Martinez Perez, SM Thampi, M Atiquzzaman, S Berretti, JJCP Rodrigues, R Tomar, RP Gorthi, P Siarry, A-S Khan Pathan, J Li, P Bedi, S Mehta, MH Kammoun & V Jain (eds), 2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016., 7732025, Institute of Electrical and Electronics Engineers (IEEE), Piscataway, NJ, pp. 56-62, 5th International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016, Jaipur, India, 21/09/16. https://doi.org/10.1109/ICACCI.2016.7732025

NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. / Mishra, Preeti; Pilli, Emmanuel S.; Varadharajant, Vijay et al.
2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016. ed. / Jinsong Wu; Gregorio Martinez Perez; Sabu M. Thampi; Mohammed Atiquzzaman; Stefano Berretti; Jeol J. C. P. Rodrigues; Raghuvir Tomar; Ravi Prakash Gorthi; Patrick Siarry; Al-Sakib Khan Pathan; Jie Li; Punam Bedi; Sameep Mehta; Mohamed Habib Kammoun; Vivek Jain. Piscataway, NJ: Institute of Electrical and Electronics Engineers (IEEE), 2016. p. 56-62 7732025.

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

TY - GEN

T1 - NvCloudIDS

T2 - 5th International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016

AU - Mishra, Preeti

AU - Pilli, Emmanuel S.

AU - Varadharajant, Vijay

AU - Tupakula, Udaya

PY - 2016/11/2

Y1 - 2016/11/2

N2 - Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.

AB - Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.

KW - Cloud Security

KW - Intrusion Detection

KW - Network Intrusions

KW - Virtual Memory Introspection (VMI)

UR - http://www.scopus.com/inward/record.url?scp=85007362176&partnerID=8YFLogxK

U2 - 10.1109/ICACCI.2016.7732025

DO - 10.1109/ICACCI.2016.7732025

M3 - Conference proceeding contribution

AN - SCOPUS:85007362176

SP - 56

EP - 62

BT - 2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016

A2 - Wu, Jinsong

A2 - Martinez Perez, Gregorio

A2 - Thampi, Sabu M.

A2 - Atiquzzaman, Mohammed

A2 - Berretti, Stefano

A2 - Rodrigues, Jeol J. C. P.

A2 - Tomar, Raghuvir

A2 - Gorthi, Ravi Prakash

A2 - Siarry, Patrick

A2 - Khan Pathan, Al-Sakib

A2 - Li, Jie

A2 - Bedi, Punam

A2 - Mehta, Sameep

A2 - Kammoun, Mohamed Habib

A2 - Jain, Vivek

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Piscataway, NJ

Y2 - 21 September 2016 through 24 September 2016

ER -

Mishra P, Pilli ES, Varadharajant V, Tupakula U. NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. In Wu J, Martinez Perez G, Thampi SM, Atiquzzaman M, Berretti S, Rodrigues JJCP, Tomar R, Gorthi RP, Siarry P, Khan Pathan A-S, Li J, Bedi P, Mehta S, Kammoun MH, Jain V, editors, 2016 International Conference on Advances in Computing, Communications and Informatics, ICACCI 2016. Piscataway, NJ: Institute of Electrical and Electronics Engineers (IEEE). 2016. p. 56-62. 7732025 doi: 10.1109/ICACCI.2016.7732025

NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment

Abstract

Other

Keywords

Access to Document

Other files and links

Fingerprint

Cite this