Discus: A massively distributed IDS architecture using a DSL-based configuration

摘要

Nowadays, cloud computing becomes quite popular and a lot of research is done on services it provides. Most of security challenges induced by this new architecture are not yet tackled. In this work, we propose a new security architecture, based on a massively distributed network of security solutions, to address these challenges. Current solutions, like IDS or firewalls, were not formerly designed to detect attacks that draw profit from the cloud structure. Our solution Discus is based on a distributed architecture using both physical and virtual probes, along with former security solutions (IDS and firewalls). This paper describes Discus Script, a dedicated language that provides an easy way to configure the components of our solution.