Intrusion Detection and Prevention in OpenStack: A Case Study on Enhancing Security and Threat Detection

Intrusion Detection and Prevention in OpenStack: A Case Study on Enhancing Security and Threat Detection

연구 분야: Safety

학회: SN Computer Science

Internet usage has experienced exponential growth over the past two decades. Nowadays, numerous human activities heavily rely on the Internet and information technology. The Internet is utilized for various purposes, including communication, online financial transactions, banking, entertainment, work, and educational tasks. As our dependency on the Internet increases, a substantial amount of data and sensitive information is inevitably transmitted over the Internet, especially through cloud services. Consequently, malicious attackers are actively seeking security loopholes and vulnerabilities, specifically targeting cloud environments. Intrusion Detection and Prevention System (IDPS) is a hardware appliance or a software application that monitors a network for malicious activity or breaches of policies, and based on the rules created, blocks any potential malicious activity. Cloud service providers and users now require IDPS as part of their security infrastructure. This paper investigates how an open-source IDPS named Snort can be effective in OpenStack-based cloud environments. The effectiveness of the Snort-based cloud security solution is demonstrated through a series of experiments.