Uma arquitetura para monitoramento e detecção de anomalias de segurança para nuvens computacionais

• Anderson Soares Ferreira UNICAMP
• Paulo Lício de Geus UNICAMP

DOI: https://doi.org/10.5753/sbseg.2013.19560

Abstract

An important aspect to security management is the continuous monitoring of the environment where we want to ensure security. However, there are still very few results in the field of security monitoring in cloud computing, which happens mainly because of the environment characteristics like virtualization, multilayer and multitenancy service. Aiming to improve security on cloud computing, this article presents an architecture for security monitoring based on SLA for IaaS services and proposes a model for security anomaly detection that uses performance signatures from the monitoring system.

References

Avritzer, A., Tanikella, R., James, K., Cole, R. G., and Weyuker, E. (2010). Monitoring for security intrusion using performance signatures. In Proceedings of the first joint WOSP/SIPEW international conference on Performance engineering, pages 93–104. ACM.

Foster, I., Zhao, Y., Raicu, I., and Lu, S. (2008). Cloud computing and grid computing 360-degree compared. In Grid Computing Environments Workshop, 2008, GCE ’08, pages 1–10.

Krutz, R. and Vines, R. (2010). Cloud Security: A Comprehensive Guide to Secure Cloud Computing. John Wiley & Sons.

Modi, C., Patel, D., Borisaniya, B., Patel, H., Patel, A., and Rajarajan, M. (2012). A survey of intrusion detection techniques in cloud. Journal of Network and Computer Applications, 36:42 – 57.

Shao, J., Wei, H., Wang, Q., and Mei, H. (2010). A runtime model based monitoring approach for cloud. In IEEE 3rd International Conference on Cloud Computing, CLOUD’10, pages 313–320.