首页> 外文会议>IEEE International Symposium on Software Reliability Engineering >Quantifying the Attack Detection Accuracy of Intrusion Detection Systems in Virtualized Environments
【24h】

Quantifying the Attack Detection Accuracy of Intrusion Detection Systems in Virtualized Environments

机译:量化虚拟环境中入侵检测系统的攻击检测精度

获取原文

摘要

With the widespread adoption of virtualization, intrusion detection systems (IDSes) are increasingly being deployed in virtualized environments. When securing an environment, IT security officers are often faced with the question of how accurate deployed IDSes are at detecting attacks. To this end, metrics for assessing the attack detection accuracy of IDSes have been developed. However, these metrics are defined with respect to a fixed set of hardware resources available to the tested IDS. Therefore, IDSes deployed in virtualized environments featuring elasticity (i.e., on-demand allocation or deallocation of virtualized hardware resources during system operation) cannot be evaluated in an accurate manner using existing metrics. In this paper, we demonstrate the impact of elasticity on IDS attack detection accuracy. In addition, we propose a novel metric and measurement methodology for accurately quantifying the accuracy of IDSes deployed in virtualized environments featuring elasticity. We demonstrate their practical use through case studies involving commonly used IDSes.
机译:随着虚拟化的广泛采用,入侵检测系统(IDS)越来越多地部署在虚拟化环境中。在保护环境时,IT安全人员经常面临这样一个问题,即已部署的IDS在检测攻击方面的准确性如何。为此,已经开发了用于评估IDS的攻击检测准确性的度量。但是,这些指标是针对可用于测试的IDS的一组固定的硬件资源定义的。因此,无法使用现有指标以准确的方式评估部署在具有弹性(即按需分配或在系统运行期间对虚拟化硬件资源进行重新分配)的虚拟化环境中的IDS。在本文中,我们演示了弹性对IDS攻击检测准确性的影响。此外,我们提出了一种新颖的度量和测量方法,用于准确量化部署在具有弹性的虚拟环境中的IDS的准确性。我们通过涉及常用IDS的案例研究证明了它们的实际用途。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号