A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment

Distributed denial-of-service (DDoS) attacks are incidents in a cloud computing environment that cause major performance disturbances. Intrusion-detection and prevention system (IDPS) are tools to protect against such incidents, and the correct placement of ID/IP systems on networks is of great impo...

Full description

Saved in:

Bibliographic Details
Main Author:	Al-Zarqawee, Aws Naser
Format:	Thesis
Language:	English
Published:	2018
Subjects:	QA75 Electronic computers Computer science
Online Access:	http://umpir.ump.edu.my/id/eprint/31127/1/A%20classifier%20mechanism%20for%20host%20based%20intrusion%20detection%20and%20prevention%20system%20in%20cloud%20computing%20environment.wm.pdf
Tags:	Add Tag No Tags, Be the first to tag this record!

id	my-ump-ir.31127
record_format	uketd_dc
spelling	my-ump-ir.311272023-01-17T06:56:12Z A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment 2018-09 Al-Zarqawee, Aws Naser QA75 Electronic computers. Computer science Distributed denial-of-service (DDoS) attacks are incidents in a cloud computing environment that cause major performance disturbances. Intrusion-detection and prevention system (IDPS) are tools to protect against such incidents, and the correct placement of ID/IP systems on networks is of great importance for optimal monitoring and for achieving maximum effectiveness in protecting a system. Even with such systems in place, however, the security level of general cloud computing must be enhanced. More potent attacks attempt to take control of the cloud environment itself; such attacks include malicious virtual-machine (VM) hyperjacking as well as traditional network-security threats such as traffic snooping (which intercepts network traffic), address spoofing and the forging of VMs or IP addresses. It is difficult to manage a host-based IDPS (H-IDPS) because information must be configured and managed for every host, so it is vital to ensure that security analysts fully understand the network and its context in order to distinguish between false positives and real problems. For this, it is necessary to know the current most important classifiers in machine learning, as these offer feasible protection against false-positive alarms in DDoS attacks. In order to design a more efficient classifier, it is necessary to develop a system for evaluating the classifier. In this thesis, a new mechanism for an H-IDPS classifier in a cloud environment has desigend. The mechanism’s design is based on the hybrid Antlion Optimization Algorithm (ALO) with Multilayer Perceptron (MLP) to protect against DDoS attacks. To implement the proposed mechanism, we demonstrate the strength of the classifier using a dimensionally reduced dataset using NSL-KDD. Furthermore, we focus on a detailed study of the NSL-KDD dataset that contains only selected records. This selected dataset provides a good analysis of various machine-learning techniques for H-IDPS. The evaluation process H-IDPS system shows the increases of intrusion detection accuracy and decreases the false positive alarms when compared to other related works. This is epitomized by the skilful use of the confusion matrix technique for organizing classifiers, visualizing their performance, and assessing their overall behaviour. 2018-09 Thesis http://umpir.ump.edu.my/id/eprint/31127/ http://umpir.ump.edu.my/id/eprint/31127/1/A%20classifier%20mechanism%20for%20host%20based%20intrusion%20detection%20and%20prevention%20system%20in%20cloud%20computing%20environment.wm.pdf pdf en public phd doctoral Universiti Malaysia Pahang Faculty of Computer System and Software Engineering Mohamad Fadli, Zolkipli
institution	Universiti Malaysia Pahang Al-Sultan Abdullah
collection	UMPSA Institutional Repository
language	English
advisor	Mohamad Fadli, Zolkipli
topic	QA75 Electronic computers Computer science
spellingShingle	QA75 Electronic computers Computer science Al-Zarqawee, Aws Naser A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment
description	Distributed denial-of-service (DDoS) attacks are incidents in a cloud computing environment that cause major performance disturbances. Intrusion-detection and prevention system (IDPS) are tools to protect against such incidents, and the correct placement of ID/IP systems on networks is of great importance for optimal monitoring and for achieving maximum effectiveness in protecting a system. Even with such systems in place, however, the security level of general cloud computing must be enhanced. More potent attacks attempt to take control of the cloud environment itself; such attacks include malicious virtual-machine (VM) hyperjacking as well as traditional network-security threats such as traffic snooping (which intercepts network traffic), address spoofing and the forging of VMs or IP addresses. It is difficult to manage a host-based IDPS (H-IDPS) because information must be configured and managed for every host, so it is vital to ensure that security analysts fully understand the network and its context in order to distinguish between false positives and real problems. For this, it is necessary to know the current most important classifiers in machine learning, as these offer feasible protection against false-positive alarms in DDoS attacks. In order to design a more efficient classifier, it is necessary to develop a system for evaluating the classifier. In this thesis, a new mechanism for an H-IDPS classifier in a cloud environment has desigend. The mechanism’s design is based on the hybrid Antlion Optimization Algorithm (ALO) with Multilayer Perceptron (MLP) to protect against DDoS attacks. To implement the proposed mechanism, we demonstrate the strength of the classifier using a dimensionally reduced dataset using NSL-KDD. Furthermore, we focus on a detailed study of the NSL-KDD dataset that contains only selected records. This selected dataset provides a good analysis of various machine-learning techniques for H-IDPS. The evaluation process H-IDPS system shows the increases of intrusion detection accuracy and decreases the false positive alarms when compared to other related works. This is epitomized by the skilful use of the confusion matrix technique for organizing classifiers, visualizing their performance, and assessing their overall behaviour.
format	Thesis
qualification_name	Doctor of Philosophy (PhD.)
qualification_level	Doctorate
author	Al-Zarqawee, Aws Naser
author_facet	Al-Zarqawee, Aws Naser
author_sort	Al-Zarqawee, Aws Naser
title	A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment
title_short	A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment
title_full	A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment
title_fullStr	A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment
title_full_unstemmed	A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment
title_sort	classifier mechanism for host based intrusion detection and prevention system in cloud computing environment
granting_institution	Universiti Malaysia Pahang
granting_department	Faculty of Computer System and Software Engineering
publishDate	2018
url	http://umpir.ump.edu.my/id/eprint/31127/1/A%20classifier%20mechanism%20for%20host%20based%20intrusion%20detection%20and%20prevention%20system%20in%20cloud%20computing%20environment.wm.pdf
_version_	1783732157886234624

A classifier mechanism for host based intrusion detection and prevention system in cloud computing environment

Similar Items