CCIPS: A Cooperative Intrusion Detection and Prevention Framework for Cloud Services

Abstract

With the recent emergence and rapid advancement of cloud computing infrastructure and services, outsourcing Information Technology (IT) and digital services to Cloud Providers (CPs) has become attractive. This will allow for a reduction in IT resources (hardware, software, services, support, and staffing), and provide flexibility and agility in resource allocation, data and resource delivery, fault-tolerance, and scalability. However, the majority of cloud service providers tailor their services to address functionality (such as availability, speed, and utilization) and design requirements (such as integration), rather than protection against cyber-attacks and associated security issues. This paper considers the detection and prevention of security attacks against cloud computing systems. A proactive Cooperative Cloud Intrusion Prevention System (CCIPS) framework is proposed to detect and prevent known and zero-day threats targeting cloud computing networks. This framework provides enhanced threat detection and prevention via behavioral and anomaly data analysis. A multi-layer approach to security is employed to provide a cooperative model cloud which has both high performance and high availability.