Name
Title | ||
|---|---|---|
PSI-NetVisor: Program semantic aware intrusion detection at network and hypervisor layer in cloud. |
Abstract | ||
|---|---|---|
Cloud Security is of paramount importance in the new era of virtualization technology. Tenant Virtual Machine(VM) level security solutions can be easily evaded by modern attack techniques. Out-VM monitoring allows cloud administrator (CA) to monitor and control a VM from a secure location outside the VM. In this paper, we propose an out-VM monitoring based approach named as 'Program Semantic-Aware Intrusion Detection at Network and Hypervisor Layer' (PSI-NetVisor) to detect attacks in both network and virtualization layer in cloud. PSI-NetVisor performs network monitoring by employing behavior based intrusion detection approach (BIDA) at the network layer of centralized Cloud Network Server (CNS); providing the first level of defense from attacks. It incorporates semantic awareness in the intrusion detection approach and enables it to provide network monitoring and process monitoring at the hypervisor layer of Cloud Compute Server (CCoS); providing the second level of defense from attacks. PSI-NetVisor employs Virtual Machine Introspection (VMI) libraries based on software break point injection to extract process execution traces from hypervisor. It further applies depth first search (DFS) to construct program semantics from control flow graph of execution traces. It applies dynamic analysis and machine learning approaches to learn the behavior of anomalies which makes it secure from obfuscation and encryption based attacks. PSI-NetVisor has been validated with latest intrusion datasets (UNSW-NB & Evasive Malware) collected from research centers and results seem to be promising. |
Year | DOI | Venue |
|---|---|---|
2017 | 10.3233/JIFS-169234 | JOURNAL OF INTELLIGENT & FUZZY SYSTEMS |
Keywords | Field | DocType |
Intrusion detection,virtual machine introspection,system call flow graph,cloud security,Malware,network attacks | Virtual machine introspection,Host-based intrusion detection system,Hypervisor,Cloud computing security,Malware,Intrusion detection system,Operating system,Mathematics,Embedded system,Cloud computing | Journal |
Volume | Issue | ISSN |
32 | 4 | 1064-1246 |
Citations | PageRank | References |
1 | 0.35 | 13 |
Authors | ||
4 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Preeti Mishra | 1 | 18 | 4.04 |
| Emmanuel S. Pilli | 2 | 88 | 14.85 |
| Vijay Varadharajan | 3 | 1773 | 210.54 |
| Udaya Kiran Tupakula | 4 | 181 | 27.55 |