Intrusion Detection System (IDS) server placement analysis in cloud computing

摘要

Security issues in cloud computing have increasingly become important issue with the growing popularity of cloud computing as it provides buyers accessibility and reliability services. Security in cloud computing are classified into two types, namely data security and network security. Our paper focus on network security issue. The types of attacks that are common in network security are ports scan, IP spoofing, ping of death, and packet sniffing. The possibility attacks can occur from both inside and outside of the cloud computing infrastructure. Several studies have shown that Intrusion Detection System (IDS) is the best solution for the detection of the attack. A key success factor for attack detection is IDS server placement. IDS can be placed separately from the server cloud, or placed in a cloud server. IDS placement in the server cloud and separate placement of cloud server has a major influence on the CPU and RAM usage on the cloud server. In this paper, we will present IDS server placement scenario for the successful detection and evaluate performance memory and CPU usage. We propose three types of placement IDS server. First, we place the IDS server inside the cloud server, the other scenario we place the IDS server separate from the cloud server, and the last we place IDS server both inside and separate cloud server. Each scenarios will be tested by the attacks from within and from outside cloud server. Within this paper we summarize that IDS server placement IDS depends on the major attacks.