Abstract:In recent times, I've encountered a principle known as cloud computing, a model that simplifies user access to data and computing power on a demand basis. The main objective of cloud computing is to accommodate users' growing needs by decreasing dependence on human resources, minimizing expenses, and enhancing the speed of data access. Nevertheless, preserving security and privacy in cloud computing systems pose notable challenges. This issue arises because these systems have a distributed structure, which is susceptible to unsanctioned access - a fundamental problem. In the context of cloud computing, the provision of services on demand makes them targets for common assaults like Denial of Service (DoS) attacks, which include Economic Denial of Sustainability (EDoS) and Distributed Denial of Service (DDoS). These onslaughts can be classified into three categories: bandwidth consumption attacks, specific application attacks, and connection layer attacks. Most of the studies conducted in this arena have concentrated on a singular type of attack, with the concurrent detection of multiple DoS attacks often overlooked. This article proposes a suitable method to identify four types of assaults: HTTP, Database, TCP SYN, and DNS Flood. The aim is to present a universal algorithm that performs effectively in detecting all four attacks instead of using separate algorithms for each one. In this technique, seventeen server parameters like memory usage, CPU usage, and input/output counts are extracted and monitored for changes, identifying the failure point using the CUSUM algorithm to calculate the likelihood of each attack. Subsequently, a fuzzy neural network is employed to determine the occurrence of an attack. When compared to the Snort software, the proposed method's results show a significant improvement in the average detection rate, jumping from 57% to 95%.

Entropy-Based Denial of Service Attack Detection in Cloud Data Center

Asidps: Auto-Scaling Intrusion Detection And Prevention System For Cloud

How to Shutdown a Cloud: a DDoS Attack in a Private Infrastructure-As-a-service Cloud.

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

Advance DDOS Detection and Mitigation Technique for Securing Cloud

Detection of DDoS Attacks in Software Defined Networking Using Entropy

Multi-Aspect DDOS Detection System for Securing Cloud Network

Malicious Virtual Machines Detection Through A Clustering Approach

Can We Beat Ddos Attacks in Clouds?

FIDS: Fuzzy Intrusion Detection System for simultaneous detection of DoS/DDoS attacks in Cloud computing

Detecting DDoS Attacks Based on Network Connection Statistics

DDoS attack protection in the era of cloud computing and Software-Defined Networking

A Novel Distributed Denial-of-Service Attack Detection Scheme for Software Defined Networking Environments.

Security of Separated Data in Cloud Systems with Competing Attack Detection and Data Theft Processes

RAM: A Resource-Aware DDoS Attack Mitigation Framework in Clouds

Quantitative Threat Assessment of Denial of Service Attacks on Service Availability

Denial-of-Service Attack Detection via Differential Analysis of Generalized Entropy Progressions

Co-residence Based Data Vulnerability Vs. Security in Cloud Computing System with Random Server Assignment

Dynamic-network-structure Based on Defense Technology against Denial of Service Attacks in Cloud Environment

A Detection Model for Distributed Denial of Service Attacks Based on Network Connection Analysis

A method of DDoS attack detection using HTTP packet pattern and rule engine in cloud computing environment