Securing Cloud from DDOS Attacks Using Intrusion Detection System in Virtual Machine

Security on computer networks is currently a matter that must be considered especially for internet users because many risks must be borne if this is negligent of attention. Data theft, system destruction, and so on are threats to users, especially on the server-side. DDoS is a method of attack that is quite popular and is often used to bring down servers. This method runs by consuming resources on the server computer so that it can no longer serve requests from the user side. With this problem, security is needed to prevent the DDoS attack, one of which is using iptables that has been provided by Linux. Implementing iptables can prevent or stop external DDoS attacks aimed at the server.

Download Full-text

Intrusion Detection System for 5G with a Focus on DOS/DDOS Attacks

10.1109/idaacs53288.2021.9661021 ◽

2021 ◽

Author(s):

Giorgi Iashvili ◽

Maksim Iavich ◽

Razvan Bocu ◽

Roman Odarchenko ◽

Sergiy Gnatyuk

Keyword(s):

Intrusion Detection ◽

Intrusion Detection System ◽

Detection System ◽

Ddos Attacks

Download Full-text

Study of intrusion detection system for DDoS attacks in cloud computing

2013 Tenth International Conference on Wireless and Optical Communications Networks (WOCN) ◽

10.1109/wocn.2013.6616255 ◽

2013 ◽

Cited By ~ 8

Author(s):

Naresh Kumar ◽

Shalini Sharma

Keyword(s):

Cloud Computing ◽

Intrusion Detection ◽

Intrusion Detection System ◽

Detection System ◽

Ddos Attacks

Download Full-text

SDN-Based Intrusion Detection System for Early Detection and Mitigation of DDoS Attacks

Information ◽

10.3390/info10030106 ◽

2019 ◽

Vol 10 (3) ◽

pp. 106 ◽

Cited By ~ 21

Author(s):

Pedro Manso ◽

José Moura ◽

Carlos Serrão

Keyword(s):

Intrusion Detection ◽

Intrusion Detection System ◽

Network Performance ◽

Detection System ◽

Denial Of Service ◽

Cyber Attacks ◽

Normal Operation ◽

Ddos Attacks ◽

Network Infrastructure ◽

Sdn Controller

The current paper addresses relevant network security vulnerabilities introduced by network devices within the emerging paradigm of Internet of Things (IoT) as well as the urgent need to mitigate the negative effects of some types of Distributed Denial of Service (DDoS) attacks that try to explore those security weaknesses. We design and implement a Software-Defined Intrusion Detection System (IDS) that reactively impairs the attacks at its origin, ensuring the “normal operation” of the network infrastructure. Our proposal includes an IDS that automatically detects several DDoS attacks, and then as an attack is detected, it notifies a Software Defined Networking (SDN) controller. The current proposal also downloads some convenient traffic forwarding decisions from the SDN controller to network devices. The evaluation results suggest that our proposal timely detects several types of cyber-attacks based on DDoS, mitigates their negative impacts on the network performance, and ensures the correct data delivery of normal traffic. Our work sheds light on the programming relevance over an abstracted view of the network infrastructure to timely detect a Botnet exploitation, mitigate malicious traffic at its source, and protect benign traffic.

Download Full-text