Adaptive cloud intrusion detection system based on pruned exact linear time technique

Elbakri, W, Siraj, MM, Al-rimy, BAS, Qasem, SN and Al-Hadhrami, T ORCID: https://orcid.org/0000-0001-7441-604X, 2024. Adaptive cloud intrusion detection system based on pruned exact linear time technique. Computers, Materials and Continua, 79 (3), pp. 3725-3756. ISSN 1546-2218

Preview

Text 1906421_Al-Hadhrami.pdf - Published version Download (1MB) | Preview

Abstract

Cloud computing environments, characterized by dynamic scaling, distributed architectures, and complex workloads, are increasingly targeted by malicious actors. These threats encompass unauthorized access, data breaches, denial-of-service attacks, and evolving malware variants. Traditional security solutions often struggle with the dynamic nature of cloud environments, highlighting the need for robust Adaptive Cloud Intrusion Detection Systems (CIDS). Existing adaptive CIDS solutions, while offering improved detection capabilities, often face limitations such as reliance on approximations for change point detection, hindering their precision in identifying anomalies. This can lead to missed attacks or an abundance of false alarms, impacting overall security effectiveness. To address these challenges, we propose ACIDS (Adaptive Cloud Intrusion Detection System)-PELT. This novel Adaptive CIDS framework leverages the Pruned Exact Linear Time (PELT) algorithm and a Support Vector Machine (SVM) for enhanced accuracy and efficiency. ACIDS-PELT comprises four key components: (1) Feature Selection: Utilizing a hybrid harmony search algorithm and the symmetrical uncertainty filter (HSO-SU) to identify the most relevant features that effectively differentiate between normal and anomalous network traffic in the cloud environment. (2) Surveillance: Employing the PELT algorithm to detect change points within the network traffic data, enabling the identification of anomalies and potential security threats with improved precision compared to existing approaches. (3) Training Set: Labeled network traffic data forms the training set used to train the SVM classifier to distinguish between normal and anomalous behaviour patterns. (4) Testing Set: The testing set evaluates ACIDS-PELT’s performance by measuring its accuracy, precision, and recall in detecting security threats within the cloud environment. We evaluate the performance of ACIDS-PELT using the NSL-KDD benchmark dataset. The results demonstrate that ACIDS-PELT outperforms existing cloud intrusion detection techniques in terms of accuracy, precision, and recall. This superiority stems from ACIDS-PELT’s ability to overcome limitations associated with approximation and imprecision in change point detection while offering a more accurate and precise approach to detecting security threats in dynamic cloud environments.

Item Type:	Journal article
Publication Title:	Computers, Materials and Continua
Creators:	Elbakri, W., Siraj, M.M., Al-rimy, B.A.S., Qasem, S.N. and Al-Hadhrami, T.
Publisher:	Tech Science Press
Date:	June 2024
Volume:	79
Number:	3
ISSN:	1546-2218
Identifiers:	Number Type 10.32604/cmc.2024.048105 DOI 1906421 Other
Rights:	This work is licensed under a Creative Commons Attribution 4.0 International License , which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
Divisions:	Schools > School of Science and Technology
Record created by:	Melissa Cornwell
Date Added:	24 Jun 2024 09:33
Last Modified:	24 Jun 2024 09:33
URI:	https://irep.ntu.ac.uk/id/eprint/51610

Actions (login required)

Edit View

Statistics

Views

Downloads