Hypervisor-based cloud intrusion detection system
Outlet Title
International Conference on Computing, Networking and Communications (ICNC)
Document Type
Conference Proceeding
Publication Date
2014
Abstract
Shared resources are an essential part of cloud computing. Virtualization and multi-tenancy provide a number of advantages for increasing resource utilization and for providing on demand elasticity. However, these cloud features also raise many security concerns related to cloud computing resources. In this paper, we propose an architecture and approach for leveraging the virtualization technology at the core of cloud computing to perform intrusion detection security using hypervisor performance metrics. Through the use of virtual machine performance metrics gathered from hypervisors, such as packets transmitted/received, block device read/write requests, and CPU utilization, we demonstrate and verify that suspicious activities can be profiled without detailed knowledge of the operating system running within the virtual machines. The proposed hypervisor-based cloud intrusion detection system does not require additional software installed in virtual machines and has many advantages compared to host-based and network based intrusion detection systems which can complement these traditional approaches to intrusion detection.
Recommended Citation
Wang, Yong and Nikolai, Jason, "Hypervisor-based cloud intrusion detection system" (2014). Faculty Research & Publications. 53.
https://scholar.dsu.edu/ccspapers/53