Designing Network Intrusion and Detection System using signature-based method for protecting OpenStack private cloud

摘要

Nowadays, cloud computing has become a preferred solution for start-up businesses and corporations. Unfortunately, cloud computing user usually does not pay attention to security aspect of cloud services. Cloud computing security is a mandatory requirement that must be fulfilled by the cloud provider. One of the solution for improving the security aspect of cloud computing services is using Network-based Intrusion Detection System (NIDS). NIDS detects and monitors attacks through the network. The signature-based method in NIDS performs identification data packet through network. In this research, the authors designed, implemented and evaluated the performance of configured NIDS. The authors also perform analysis of the result and performance evaluation of NIDS on OpenStack private cloud. The aim of this research is to evaluate the NIDS performance and its accuracy in classifying attacks. The results reveal that the model is functioning securely and accurately. Moreover, the real-time alert of NIDS is able to detect the classified attacks through network successfully.