NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment

Preeti Mishra; Emmanuel Shubhakar Pilli; Vijay Varadharajant; Udaya Tupakula

doi:10.1109/ICACCI.2016.7732025

NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment

Preeti Mishra
, Emmanuel Shubhakar Pilli
, Vijay Varadharajant
, Udaya Tupakula

Computer Science

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

29 Citations (Scopus)

Abstract

Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.

Original language	English
Title of host publication	2016 International conference on advances in computing, communications and informatics ()
Editors	Jinsong Wu, Gregorio Martinez Perez, Sabu M. Thampi, Mohammed Atiquzzaman, Stefano Berretti, Jeol J. C. P. Rodrigues, Raghuvir Tomar, Ravi Prakash Gorthi, Patrick Siarry, Al-Sakib Khan Pathan, Jie Li, Punam Bedi, Sameep Mehta, Mohamed Habib Kammoun, Vivek Jain
Place of Publication	United States of America
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	56-62
ISBN (Print)	9781509020294, 9781509020300, 9781509020287
DOIs	https://doi.org/10.1109/ICACCI.2016.7732025
Publication status	Published - 3 Nov 2016
Event	2016 International Conference on Advances in Computing, Communications and Informatics (ICACCI) - Jaipur, India Duration: 21 Sept 2016 → 24 Sept 2016

Conference

Conference	2016 International Conference on Advances in Computing, Communications and Informatics (ICACCI)
City	Jaipur, India
Period	21/09/16 → 24/09/16

Access to Document

10.1109/ICACCI.2016.7732025

https://hdl.handle.net/1959.11/57288

Handle.net

Persistent link

Cite this

Mishra, P., Pilli, E. S., Varadharajant, V., & Tupakula, U. (2016). NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. In J. Wu, G. M. Perez, S. M. Thampi, M. Atiquzzaman, S. Berretti, J. J. C. P. Rodrigues, R. Tomar, R. P. Gorthi, P. Siarry, A.-S. K. Pathan, J. Li, P. Bedi, S. Mehta, M. H. Kammoun, & V. Jain (Eds.), 2016 International conference on advances in computing, communications and informatics () (pp. 56-62). Institute of Electrical and Electronics Engineers (IEEE). https://doi.org/10.1109/ICACCI.2016.7732025

Mishra, Preeti ; Pilli, Emmanuel Shubhakar ; Varadharajant, Vijay et al. / NvCloudIDS : A security architecture to detect intrusions at network and virtualization layer in cloud environment. 2016 International conference on advances in computing, communications and informatics (). editor / Jinsong Wu ; Gregorio Martinez Perez ; Sabu M. Thampi ; Mohammed Atiquzzaman ; Stefano Berretti ; Jeol J. C. P. Rodrigues ; Raghuvir Tomar ; Ravi Prakash Gorthi ; Patrick Siarry ; Al-Sakib Khan Pathan ; Jie Li ; Punam Bedi ; Sameep Mehta ; Mohamed Habib Kammoun ; Vivek Jain. United States of America : Institute of Electrical and Electronics Engineers (IEEE), 2016. pp. 56-62

@inproceedings{16fdfc82d95449dd9aa5b16e276e9f1a,

title = "NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment",

abstract = "Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.",

author = "Preeti Mishra and Pilli, \{Emmanuel Shubhakar\} and Vijay Varadharajant and Udaya Tupakula",

year = "2016",

month = nov,

day = "3",

doi = "10.1109/ICACCI.2016.7732025",

language = "English",

isbn = "9781509020294",

pages = "56--62",

editor = "Jinsong Wu and Perez, \{Gregorio Martinez\} and Thampi, \{Sabu M.\} and Mohammed Atiquzzaman and Stefano Berretti and Rodrigues, \{Jeol J. C. P.\} and Raghuvir Tomar and Gorthi, \{Ravi Prakash\} and Patrick Siarry and Pathan, \{Al-Sakib Khan\} and Jie Li and Punam Bedi and Sameep Mehta and Kammoun, \{Mohamed Habib\} and Vivek Jain",

booktitle = "2016 International conference on advances in computing, communications and informatics ()",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

note = "2016 International Conference on Advances in Computing, Communications and Informatics (ICACCI) ; Conference date: 21-09-2016 Through 24-09-2016",

}

Mishra, P, Pilli, ES, Varadharajant, V & Tupakula, U 2016, NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. in J Wu, GM Perez, SM Thampi, M Atiquzzaman, S Berretti, JJCP Rodrigues, R Tomar, RP Gorthi, P Siarry, A-SK Pathan, J Li, P Bedi, S Mehta, MH Kammoun & V Jain (eds), 2016 International conference on advances in computing, communications and informatics (). Institute of Electrical and Electronics Engineers (IEEE), United States of America, pp. 56-62, 2016 International Conference on Advances in Computing, Communications and Informatics (ICACCI), Jaipur, India, 21/09/16. https://doi.org/10.1109/ICACCI.2016.7732025

NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. / Mishra, Preeti; Pilli, Emmanuel Shubhakar; Varadharajant, Vijay et al.
2016 International conference on advances in computing, communications and informatics (). ed. / Jinsong Wu; Gregorio Martinez Perez; Sabu M. Thampi; Mohammed Atiquzzaman; Stefano Berretti; Jeol J. C. P. Rodrigues; Raghuvir Tomar; Ravi Prakash Gorthi; Patrick Siarry; Al-Sakib Khan Pathan; Jie Li; Punam Bedi; Sameep Mehta; Mohamed Habib Kammoun; Vivek Jain. United States of America: Institute of Electrical and Electronics Engineers (IEEE), 2016. p. 56-62.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - NvCloudIDS

T2 - 2016 International Conference on Advances in Computing, Communications and Informatics (ICACCI)

AU - Mishra, Preeti

AU - Pilli, Emmanuel Shubhakar

AU - Varadharajant, Vijay

AU - Tupakula, Udaya

PY - 2016/11/3

Y1 - 2016/11/3

N2 - Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.

AB - Today we are living in the era of Cloud Computing where services are provisioned to users on demand and on a pay-per-use basis. On oneside, Cloud Computing has made things easier but it has also opened new doors for cyber attackers. In this paper, we propose an efficient security architecture named as NvCloudIDS to deal with intrusions at Network and Virtualization layer in Cloud Environment. NvCloudIDS performs the behavioral analysis of network traffic coming to or going from Cloud Networking Server (CNS) and provides first level of defense from intrusions at network level. It also performs Virtual Machine (VM) memory introspection and VM traffic analysis at hypervsior layer of Cloud Compute Server (CCoS) and provides second level of defense at virtualization level. The architecture of NvCloudIDS is primarily designed to improve the robustness and power of attack detection of IDS by leveraging Virtual Machine Introspection (VMI) and Machine learning techniques. The framework is validated with recent intrusion dataset (UNSW-NB) and malware binaries collected from research centers and the results seem to be promising.

U2 - 10.1109/ICACCI.2016.7732025

DO - 10.1109/ICACCI.2016.7732025

M3 - Conference contribution

SN - 9781509020294

SN - 9781509020300

SN - 9781509020287

SP - 56

EP - 62

BT - 2016 International conference on advances in computing, communications and informatics ()

A2 - Wu, Jinsong

A2 - Perez, Gregorio Martinez

A2 - Thampi, Sabu M.

A2 - Atiquzzaman, Mohammed

A2 - Berretti, Stefano

A2 - Rodrigues, Jeol J. C. P.

A2 - Tomar, Raghuvir

A2 - Gorthi, Ravi Prakash

A2 - Siarry, Patrick

A2 - Pathan, Al-Sakib Khan

A2 - Li, Jie

A2 - Bedi, Punam

A2 - Mehta, Sameep

A2 - Kammoun, Mohamed Habib

A2 - Jain, Vivek

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - United States of America

Y2 - 21 September 2016 through 24 September 2016

ER -

Mishra P, Pilli ES, Varadharajant V, Tupakula U. NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment. In Wu J, Perez GM, Thampi SM, Atiquzzaman M, Berretti S, Rodrigues JJCP, Tomar R, Gorthi RP, Siarry P, Pathan ASK, Li J, Bedi P, Mehta S, Kammoun MH, Jain V, editors, 2016 International conference on advances in computing, communications and informatics (). United States of America: Institute of Electrical and Electronics Engineers (IEEE). 2016. p. 56-62 doi: 10.1109/ICACCI.2016.7732025

NvCloudIDS: A security architecture to detect intrusions at network and virtualization layer in cloud environment

Abstract

Conference

Access to Document

Handle.net

Fingerprint

Cite this