Netinfo Security ›› 2015, Vol. 15 ›› Issue (9): 191-195.doi: 10.3969/j.issn.1671-1122.2015.09.043

• Orginal Article • Previous Articles     Next Articles

Design of Software Defined Intrusion Detection System in Cloud

Yi-zhou ZHOU(), Bin WANG, Xiao-quan XIE   

  1. Institute 706, The Second Academy of China Aerospace Science and Industry Corporation, Beijing 100854, China
  • Received:2015-07-15 Online:2015-09-30 Published:2015-11-13

Abstract:

The technology of cloud computing has received the attention of academia and industry in the development of the last ten years, but the security problem restricts its development. Towards the security issues faced by the cloud, the cloud often use a variety of security means the combination of solutions to ensure its security. In these security measures, intrusion detection system (IDS) is an important and indispensable link in cloud security solutions. In this paper, towards to the cloud platform which used software defined network (SDN), and the intrusion detection system deployed on it. We analysis the issues the IDS faced and conclude the correspond solutions, put forward the design goal of the IDS, and designed a software defined IDS based on SDN. The system has robustness, it can save the cloud resource consumption, and after the virtual machine migration, it’s still under the protection of the IDS, finally realize the important modules of the system.

Key words: cloud computing, intrusion detection system, software defined network

CLC Number: