Towards designing privacy-preserving signature-based IDS as a service: A study and practice

Yuxin MENG, Wenjuan LI, Lam-For KWOK, Yang XIANG

Research output: Chapter in Book/Report/Conference proceedingChapters

12 Citations (Scopus)

Abstract

With the advent of Cloud Computing, IDS as a service (IDSaaS) has been proposed as an alternative to protect a network (e.g., financial organization) from a wide range of network attacks by offloading the expensive operations such as the process of signature matching to the cloud. The IDSaaS can be roughly classified into two types: signature-based detection and anomaly-based detection. During the packet inspection, no party wants to disclose their own data especially sensitive information to others, even to the cloud provider, for privacy concerns. However, current solutions of IDSaaS have not much discussed this issue. In this work, focus on the signature-based IDSaaS, we begin by designing a promising privacy-preserving intrusion detection mechanism, the main feature of which is that the process of signature matching does not reveal any specific content of network packets by means of a fingerprint-based comparison. We further conduct a study to evaluate this mechanism under a cloud scenario and identify several open problems and issues for designing such a privacy-preserving mechanism for IDSaaS in a practical environment. Copyright © 2013 IEEE.

Original languageEnglish
Title of host publicationProceedings of 5th International Conference on Intelligent Networking and Collaborative Systems, INCoS 2013
Place of PublicationUSA
PublisherIEEE
Pages181-188
ISBN (Print)9780769549880
DOIs
Publication statusPublished - 2013

Citation

Meng, Y., Li, W., Kwok, L.-F., & Xiang, Y. (2013). Towards designing privacy-preserving signature-based IDS as a service: A study and practice. In Proceedings of 5th International Conference on Intelligent Networking and Collaborative Systems, INCoS 2013 (pp. 181-188). IEEE. https://doi.org/10.1109/INCoS.2013.35

Fingerprint

Dive into the research topics of 'Towards designing privacy-preserving signature-based IDS as a service: A study and practice'. Together they form a unique fingerprint.