journal article·2024-06-21Open access

A Deep Learning Approach for Intrusion Detection Systems in Cloud Computing Environments

Wa’ad H. Aljuaid, Sultan S. Alshamrani

Applied Sciences· Volume 14· Issue 13

Abstract

Cloud computing services have become indispensable to people’s lives. Many of their activities are performed through cloud services, from small companies to large enterprises and individuals to government agencies. It has enabled clients to use companies’ services on demand at the lowest cost anywhere, anytime, over the Internet. Despite these advantages, cloud networks are vulnerable to many types of attacks. However, as the adoption of cloud services accelerates, the risks associated with these services have also increased. For this reason, solutions have been implemented to improve cloud security, such as monitoring networks, the backbone of the cloud infrastructure, and detecting and classifying cyberattacks. Therefore, an intrusion detection system (IDS) is one of the essential defenses for detecting attacks in the cloud computing network. Current IDSs encounter some challenges in handling and simultaneously analyzing the large scale of traffic found in the cloud environment, and this affects the accuracy of cyberattack detection. Therefore, this research proposes a deep learning-based model by leveraging advanced convolutional neural networks (CNNs)-based model architecture to detect cyberattacks in the cloud environment efficiently. The proposed CNN-based model for intrusion detection consists of multiple significant stages: dataset collection, preprocessing, the SMOTE balance data strategy, feature selection, model training, testing, and performance evaluation. Experiments have demonstrated that the proposed model is highly effective in protecting cloud networks against various potential attacks. With over 98.67% accuracy, precision, and recall, the model has proven its ability to detect and classify network intrusions. Detailed analyses show that the model is proficient in securing cloud security measures and mitigating the risks associated with evolving security threats.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Internet Traffic Analysis and Secure E-voting

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department Information Technology, College of Computers and Information Technology, Taif University, Taif 21944, Saudi Arabia

Funding

Taif University

References (37)

Show source-provided references
1. Jouini, M., and Rabai, L.B.A. (2019). A security framework for secure cloud computing environments. Cloud security: Concepts, Methodologies, Tools, and Applications, IGI Global.10.4018/978-1-5225-8176-5.ch011 ↗
2. Saini, P.S., Behal, S., and Bhatia, S. (2020, January 12–14). Detection of DDoS attacks using machine learning algorithms. Proceedings of the 2020 7th International Conference on Computing for Sustainable Global Development (INDIACom), New Delhi, India.10.23919/INDIACom49435.2020.9083716 ↗
3. Cloud computing: A perspective study10.1007/s00354-008-0081-5 ↗
4. Bakro, M., Bisoy, S.K., Patel, A.K., and Naal, M.A. (2021). Performance analysis of cloud computing encryption algorithms. Advances in Intelligent Computing and Communication, Proceedings of the ICAC 2020, Colombo, Sri Lanka, 10–11 December 2020, Springer.10.1007/978-981-16-0695-3_35 ↗
5. El Alloussi, H., Fetjah, L., and Sekkaki, A. (2012, January 23–24). L’état de l’art de la sécurité dans le Cloud Computing. Proceedings of the INTIS 2012, Mohammadia, Morocco.
6. A novel approach to intrusion detection using SVM ensemble with feature augmentation10.1016/j.cose.2019.05.022 ↗
7. Edeh, D.I. (2021). Network Intrusion Detection System Using Deep Learning Technique. [Master’s Thesis, Department of Computing, University of Turku].
8. Cloud-Based Intrusion Detection Approach Using Machine Learning Techniques10.26599/BDMA.2022.9020038 ↗
9. Jyothsna, V., Manisha, C., and NanduSri, B.S. (Res. Sq., 2023). Intrusion Detection System for Detection of DDoS Attacks in Cloud Environment, Res. Sq.
10. Aldallal, A. (2022). Toward efficient intrusion detection system using hybrid deep learning approach. Symmetry, 14.10.3390/sym14091916 ↗
11. Cloud-based intrusion detection using kernel fuzzy clustering and optimal type-2 fuzzy neural network10.1007/s10586-021-03281-9 ↗
12. Wu, P. (2020). Deep learning for network intrusion detection: Attack recognition with computational intelligence. [Master’s Thesis, University of New South Wales].
13. A novel scalable intrusion detection system based on deep learning10.1007/s10207-020-00508-5 ↗
14. Liu, H., and Lang, B. (2019). Machine learning and deep learning methods for intrusion detection systems: A survey. Appl. Sci., 9.10.3390/app9204396 ↗
15. Optimized deep learning with binary PSO for intrusion detection on CSE-CIC-IDS2018 dataset10.29304/jqcm.2020.12.3.706 ↗
16. Real-time DDoS flood attack monitoring and detection (RT-AMD) model for cloud computing10.7717/peerj-cs.814 ↗
17. Hyperband tuned deep neural network with well posed stacked sparse autoencoder for detection of DDoS attacks in cloud10.1109/ACCESS.2020.3028690 ↗
18. Khraisat, A., Gondal, I., Vamplew, P., Kamruzzaman, J., and Alazab, A. (2020). Hybrid intrusion detection system based on the stacking ensemble of c5 decision tree classifier and one class support vector machine. Electronics, 9.10.3390/electronics9010173 ↗
19. Qazi, E.U.H., Faheem, M.H., and Zia, T. (2023). HDLNIDS: Hybrid Deep-Learning-Based Network Intrusion Detection System. Appl. Sci., 13.10.3390/app13084921 ↗
20. DDos attack intrusion detection system based on hybridization of CNN and LSTM
21. A deep learning approach for intrusion detection using recurrent neural networks10.1109/ACCESS.2017.2762418 ↗
22. Chen, L., Kuang, X., Xu, A., Suo, S., and Yang, Y. (2020, January 5–6). A novel network intrusion detection system based on CNN. Proceedings of the 2020 Eighth International Conference on Advanced Cloud and Big Data (CBD), Taiyuan, China.10.1109/CBD51900.2020.00051 ↗
23. Nayyar, S., Arora, S., and Singh, M. (2020, January 28–30). Recurrent neural network-based intrusion detection system. Proceedings of the 2020 International Conference on Communication and Signal Processing (ICCSP), Chennai, India.10.1109/ICCSP48568.2020.9182099 ↗
24. Farahnakian, F., and Heikkonen, J. (2018, January 11–14). A deep auto-encoder based approach for intrusion detection system. Proceedings of the 2018 20th International Conference on Advanced Communication Technology (ICACT), Chuncheon, Republic of Korea.10.23919/ICACT.2018.8323688 ↗
25. DDoS attack classification on cloud environment using machine learning techniques with different feature selection methods10.30534/ijatcse/2020/60952020 ↗
26. Enhanced network anomaly detection based on deep neural networks10.1109/ACCESS.2018.2863036 ↗
27. Krishna, A., Lal, A., Mathewkutty, A.J., Jacob, D.S., and Hari, M. (2020, January 2–4). Intrusion detection and prevention system using deep learning. Proceedings of the 2020 International Conference on Electronics and Sustainable Communication Systems (ICESC), Coimbatore, India.10.1109/ICESC48915.2020.9155711 ↗
28. An adaptive ensemble machine learning model for intrusion detection10.1109/ACCESS.2019.2923640 ↗
29. Phase Space Graph Convolutional Network for Chaotic Time Series Learning10.1109/TII.2024.3363089 ↗
30. (2023, December 06). IDS 2018 | Datasets | Research | Canadian Institute for Cybersecurity | UNB. (n.d.). Available online: https://www.unb.ca/cic/datasets/ids-2018.html.
31. A review on imbalanced data handling using undersampling and oversampling technique10.23883/IJRTER.2017.3168.0UWXM ↗
32. Jaw, E., and Wang, X. (2021). Feature selection and ensemble-based intrusion detection system: An efficient and comprehensive approach. Symmetry, 13.10.3390/sym13101764 ↗
33. Performance analysis of flow-based attacks detection on CSE-CIC-IDS2018 dataset using deep learning
34. Attack classification of an intrusion detection system using deep learning and hyperparameter optimization
35. Alzughaibi, S., and El Khediri, S. (2023). A cloud intrusion detection system based on dnn using backpropagation and pso on the cse-cic-ids2018 dataset. Appl. Sci., 13.10.3390/app13042276 ↗
36. Cyber threat intelligence using PCA-DNN model to detect abnormal network behavior10.1016/j.eij.2021.12.001 ↗
37. Deep Learning for Improving Attack Detection System Using CSE-CICIDS2018