Network Intrusion Detection and Countermeasure Selection(NICE) in Virtual Network

Abstract

The most critical issues that pulled tons of research is cloud security that leads to the improvement in recent years. By Distributed Denial of service(DDoS) attack the attackers can compromise the cloud system by investigating vulnerabilities. At the initial stage multi-step exploration, vulnerability with low frequency and a virtual machine which are identified and compromised are included in DDoS attacks. The vulnerable VM will act as a zombie which is difficult to detect in cloud systems especially the clouds like Infrastructure-as-a-service(IAAS). A multi-phase distributed vulnerability detection and countermeasure selection mechanism called NICE which will prevent the VM which are vulnerable to be compromised in the cloud. An attack graph based analytical models are built and re-configurable virtual network-based countermeasures.A programming APIs based on open flow network is been proposed to build and control the traffic flow over private virtual networks.Here the host-based systems are not taken into consideration in order to improve the attack detection and mitigation this system should be used.The proposed solution will demonstrate the efficiency and effectiveness of the evaluation of system and security.