Cloud Security

Techniques and Applications

Sirisha Potluri, Katta Subba Rao, Sachi Nandan Mohanty, Sirisha Potluri, Katta Subba Rao, Sachi Nandan Mohanty

• Publisher: De Gruyter
• Year: 2021
• eBook ISBN: 9783110732702
• Edition: 1
• Topic: Computer Science
• Subtopic: IT Industry
• Index: Computer Science

This book presents research on the state-of-the-art methods and applications. Security and privacy related issues of cloud are addressed with best practices and approaches for secure cloud computing, such as cloud ontology, blockchain, recommender systems, optimization strategies, data security, intelligent algorithms, defense mechanisms for mitigating DDoS attacks, potential communication algorithms in cloud based IoT, secure cloud solutions.

Security and Privacy Preservation Model to Mitigate DDoS Attacks in Cloud

Sirisha Potluri

Sachi Nandan Mohanty

T. Kundana

D. Abhinav

P. Sushrutha

Abstract

Denial-of-service (DoS) attack occurrences are among the key security challenges within the rising cloud computing models. Currently, a number of different types of DoS attacks are conducted against the various cloud services and resources, which target their availability, service level agreements SLAs, and performance. A successful DDoS attack would possibly lead to service degradation or complete outage. DDoS attacks will reduce the network re-sources which may result in bandwidth depletion. The main objective of DDoS attacks is to prevent certain users from accessing the services in the cloud. In this research, we propose a privacy-preserving cross-domain at-tacks detection scheme for SDNs. Predis may be a combination of perturbation encryption and encoding to guard the privacy and uses a computationally simple and efficient machine learning algorithm k-Nearest Neighbour (KNN) for its detection. Here we also improve the KNN to achieve much better efficiency. Through extensive simulations and theoretical analysis. The DEMO of this algorithm is capable to realize the detection process efficient and accurate attack detection by keeping sensitive information secure. Virtualization enables simultaneous sharing of resources from a single server to some applications or services, this induces a certain amount of threats and security issues for the cloud. This module focuses on identifying challenges related to cloud security and tries to introduce ways in resolving these issues

Keywords: Denial-of-Service, KNN, Software Defined Networks, Cryptography, Virtualization, Cloud Security, Cloud Privacy,

1 Introduction

The practice of employing a network of remote servers hosted on the web to store, manage, and process data, instead of a local server or a private computer is called cloud computing. It is a pay-for-use model. Cloud computing can be considered as the future of the emerging technologies because of the combination of emerging technologies like virtualization and service oriented architecture. Based on the deployment models there are various types of clouds [1].

• –
  Public/Internet Cloud
• –
  Private/Enterprise Cloud
• –
  Hybrid/Mixed Cloud
• –
  Community Cloud

Public cloud is designed for a substantial set of public clients, Private clouds services are available only for the cloud owners. The combination of two or more clouds can be considered as hybrid cloud where in the two clouds can be either public or community or private clouds, broadly community clouds services are shared between several organizations.

Cloud provides services using various models like Software as a Service, Platform as a Service and Infrastructure as a Service.

• –
  SaaS: It provides user access to software applications. These software applications which are present in the cloud are used for an enormous range of tasks.
• –
  PaaS: It provides all the hardware and software components that are required to build cloud-based applications.
• –
  IaaS: It dispenses services like storage, security tools, and networking for end users.

Several critical security attacks are designed and proposed against various cloud deployment models which pose severe security risks to the adaptor. Attacks such as wrapping, malware injection, and other attacks can be conducted against cloud computing. One such security attack is the Denial of Service (DoS) attack. It is an event or malicious behaviour that mitigates or prevents the cloud’s security to perform its expected functions and services. A distributed form of DoS attack is called a Distributed Denial of Service (DDoS) attack which applies numerous network hosts to inflict more effects on the dupe [2].

DDoS attacks can be classified into the subsequent categories

• –
  Attacks on Bandwidth
• –
  Physical Disruption.
• –
  Limitation Exploitation
• –
  Attacks on Connectivity
• –
  Exhaustion of Resources
• –
  Process disruption
• –
  Data corruption

Software-Defined Networks (SDNs) have emerged as a new communication paradigm, released from direct integration into traditional networks and provides a system and network flexibility through a sensible network controller. SDNs contain a data plane, a control plane, and an application plane. The control plane contains some controllers that use the logic control strategy and maintain the entire network view as logic-centric. Administrators remove all network views from network services and provide an easy-to-use interface for providers, researchers, or third parties to facilitate these employees to customize transaction plans and see reasonable network management. SDNs users do not have to worry about the technical details of the device below, a simple system can detect the fast delivery of new applications

Advanced control features and systems enable SDNs to be exposed to known as Distribute...

Table of contents

• Title Page
• Copyright
• Contents
• Preface
• List of Abbreviations
• List of Contributors
• Cloud Security Concepts, Threats and Solutions: Artificial Intelligence Based Approach
• Addressing Security and Privacy in Cloud Computing: Blockchain as a Service
• Security and Privacy Preservation Model to Mitigate DDoS Attacks in Cloud
• A Secure Cloud Infrastructure towards Smart Healthcare: IoT Based Health Monitoring
• Internet of Cloud: Secure and Privacy Preserving Cloud Model with IoT Enabled Service
• Marketing analytics as a Service: Secure Cloud Based Automation Strategy
• Next Generation Cloud Security: State of the Art Machine Learning Model
• Secure Intelligent Framework for VANET: Cloud Based Transportation Model
• Cloud Manufacturing Service: A Secure and Protected Communication System
• Index