Abstract:Massive Internet invasions implemented through the distributed platform fabricated by rapid diffusion of malwares, has become a significant issue in network security. We argue that the notion of “Collaborative Security” is an emerging trend in resisting distributed attacks originated from malware. Therefore, this paper proposes a new architecture: CloudSEC, for composing collaborative security-related services in clouds, such as correlated intrusion analysis, anti-spam, anti-DDOS, automated malware detection and containment. CloudSEC is modeled as a dynamic peer-to-peer overlay hierarchy with three types of top-down architectural components. Based on, this architecture, both data distribution and task scheduling overlays can be simultaneously implemented in a loosely coupled fashion, which can efficiently retrieve data resources from heterogeneous network security facilities, and harness distributed collection of computational resources to process data-intensive tasks. Hence, CloudSEC endues the network security infrastructure with the capability of dynamic adaptation and collaboration on an inter-organizational scale. The results of preliminary evaluation demonstrate that, CloudSEC not only delivers a sample service of distributed intrusion correlation with high scalability and robustness, but also achieves remarkable effectiveness in data sharing and task scheduling.

Tree-like Hierarchical Model for Distributed Micro-Security System

Research of United Platform of Network Security Management Model

Distributed Management and Dynamic Behavior for Multi-Level Security

A New Model of Security for Distributed Systems

Design and Implementation of A Network Security Management System

A Collaborative Network Security Management System in Metropolitan Area Network

An authentication model for multilevel security domains

Self-organized Hierarchical Massive Network Intrusion Detection System

A Hierarchical Model for Distributed Attacks

Distributed Secure File System Based on LDAP and SSH

Hierarchical Architecture for Better Network Management

Modelization and analysis of dynamic heterogeneous redundant system

The Hierarchical Weighted Multi-State $k$ -out-of- $n$ System Model and Its Application for Infrastructure Management

Dynamic Network Management System Model Based on Java and Simple Network Management Protocol

NetSecu: A Collaborative Network Security Platform for In-network Security

A Modeling Method of Cyberspace Security Structure Based on Layer-Level Division

A Scalable, Web-Based Architecture For Hierarchical Network Management

Security Improvement on an Efficient Key Distribution Mechanism for Large-Scale Wireless Sensor Network

Immunity-Based Security Model for Wireless Mesh Networks

CloudSEC: A Cloud Architecture for Composing Collaborative Security Services

Distributed hierarchical access control for secure group communications