Detecting impersonation attacks in cloud computing environments using a centric user profiling approach

doi:10.1016/j.future.2020.12.009

Return

Detecting impersonation attacks in cloud computing environments using a centric user profiling approach

2021-04-01

PRE

Hisham A. Kholidy *

DOI：10.1016/j.future.2020.12.009

Original

Original request for help

Save

Abstract

En 中文

Cloud computing has become the most needed technology for the IT industry. Impersonation attacks are among the most dangerous threats that Clouds face. In this paper, we present an approach to detect masquerade attacks in Clouds. The efficient detection of these attacks should correlate user behaviors in distinct environments and also should apply to several deployment models. We present and evaluate three approaches to detect Impersonation and masquerade attacks. The first approach analyzes sequences of correlated system calls from the VMs operating systems, while the second analyzes the NetFlow data from the network environment. The third approach integrates these two approaches by using a neural network that will produce better detections than any of the first two approaches. To simplify the testing and the evaluation of the three methods, the Cloud Intrusion Detection Dataset (CIDD) is used as a source for cloud audits data. The evaluation has considered alternative deployment models through our two intrusion detection frameworks, CIDS and CIDS-VIRT. The paper also shows that the proposed detection approaches are more accurate and outperform the SWAD-MMD, a recent masquerade detection framework that works in the cloud computing systems. Furthermore, the paper details our experimental results and evaluates the computational performance and the detection accuracy of these approaches. (C) 2020 Elsevier B.V. All rights reserved.

Keywords:

Impersonation detection

IDS

Audit correlation

Cloud computing

System calls

NetFlow

Feature extraction

Centric Profiling

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.