http://wiki.iiis.systems:9988/w/api.php?action=feedcontributions&feedformat=atom&user=Xqt 2026-05-17T14:23:12Z User contributions MediaWiki 1.24.0-rc.1 http://wiki.iiis.systems:9988/w/index.php?title=Projects:CIDS&diff=407 2016-11-17T02:01:08Z

<p>Xqt: </p> <hr /> <div>= Project Name =<br /> CIDS: adapting legacy intrusion detection systems to the cloud with hybrid sampling<br /> <br /> = Introduction =<br /> Many attacks originate from inside, and security problems within cloud-computing platforms are becoming more and more severe. Although many Intrusion Detection System (IDS) help monitor and protect the inbound and outbound traffic of data centers, it is still challenging to deploy IDS inside a cloud-computing platform due to extremely high bandwidth within, and the lack of a single ingress point to deploy the IDS. This thesis presents two ideas allowing traditional IDS to be adopted to the cloud environment: software-defined-networking (SDN) based packet collection and a hybrid sampling algorithm to significantly reduce workload on the IDS.<br /> <br /> We integrate our data collector in the Open vSwitch of every physical server, making packets capturing highly efficient. Our hybrid sampling algo-rithm combines both flow statistics and IDS feedback to intelligently choose which packets to sample. The sampling rate is determined by the current workload in the cloud, and thus minimizing the effects to normal workload.<br /> <br /> We evaluate our prototype system CIDS on a 125-server production OpenStack cloud using real world attack traces, and demonstrate the effec-tiveness of our approach.<br /> <br /> <br /> = Particpant =<br /> Qingtang Xia<br /> <br /> Tianjia Chen<br /> <br /> Wei Xu<br /> <br /> <br /> = Progress =<br /> == Sep. 2014 ==<br /> start<br /> <br /> == Nov. 2016 ==<br /> The paper is accepted by SC2<br /> <br /> <br /> <br /> = Paper =<br /> {{#l:PID4532159.pdf}}</div>

Xqt http://wiki.iiis.systems:9988/w/index.php?title=Projects:CIDS&diff=406 2016-11-17T01:46:14Z

<p>Xqt: /* 原文 */</p> <hr /> <div>= Project Name =<br /> CIDS: adapting legacy intrusion detection systems to the cloud with hybrid sampling<br /> <br /> = Introduction =<br /> Many attacks originate from inside, and security problems within cloud-computing platforms are becoming more and more severe. Although many Intrusion Detection System (IDS) help monitor and protect the inbound and outbound traffic of data centers, it is still challenging to deploy IDS inside a cloud-computing platform due to extremely high bandwidth within, and the lack of a single ingress point to deploy the IDS. This thesis presents two ideas allowing traditional IDS to be adopted to the cloud environment: software-defined-networking (SDN) based packet collection and a hybrid sampling algorithm to significantly reduce workload on the IDS.<br /> <br /> We integrate our data collector in the Open vSwitch of every physical server, making packets capturing highly efficient. Our hybrid sampling algo-rithm combines both flow statistics and IDS feedback to intelligently choose which packets to sample. The sampling rate is determined by the current workload in the cloud, and thus minimizing the effects to normal workload.<br /> <br /> We evaluate our prototype system CIDS on a 125-server production OpenStack cloud using real world attack traces, and demonstrate the effec-tiveness of our approach.<br /> <br /> <br /> = Particpant =<br /> Qingtang Xia<br /> <br /> Tianjia Chen<br /> <br /> Wei Xu<br /> <br /> <br /> = Progress =<br /> == Sep. 2014 ==<br /> start<br /> <br /> == Nov. 2016 ==<br /> The paper is accepted by SC2<br /> <br /> <br /> <br /> = 原文 =<br /> {{#l:PID4532159.pdf}}</div>

Xqt http://wiki.iiis.systems:9988/w/index.php?title=File:PID4532159.pdf&diff=405 2016-11-17T01:46:05Z

<p>Xqt: MsUpload</p> <hr /> <div>MsUpload</div>

Xqt http://wiki.iiis.systems:9988/w/index.php?title=Projects:CIDS&diff=404 2016-11-17T01:45:08Z

<p>Xqt: Created page with &quot;= Project Name = CIDS: adapting legacy intrusion detection systems to the cloud with hybrid sampling = Introduction = Many attacks originate from inside, and security problem...&quot;</p> <hr /> <div>= Project Name =<br /> CIDS: adapting legacy intrusion detection systems to the cloud with hybrid sampling<br /> <br /> = Introduction =<br /> Many attacks originate from inside, and security problems within cloud-computing platforms are becoming more and more severe. Although many Intrusion Detection System (IDS) help monitor and protect the inbound and outbound traffic of data centers, it is still challenging to deploy IDS inside a cloud-computing platform due to extremely high bandwidth within, and the lack of a single ingress point to deploy the IDS. This thesis presents two ideas allowing traditional IDS to be adopted to the cloud environment: software-defined-networking (SDN) based packet collection and a hybrid sampling algorithm to significantly reduce workload on the IDS.<br /> <br /> We integrate our data collector in the Open vSwitch of every physical server, making packets capturing highly efficient. Our hybrid sampling algo-rithm combines both flow statistics and IDS feedback to intelligently choose which packets to sample. The sampling rate is determined by the current workload in the cloud, and thus minimizing the effects to normal workload.<br /> <br /> We evaluate our prototype system CIDS on a 125-server production OpenStack cloud using real world attack traces, and demonstrate the effec-tiveness of our approach.<br /> <br /> <br /> = Particpant =<br /> Qingtang Xia<br /> <br /> Tianjia Chen<br /> <br /> Wei Xu<br /> <br /> <br /> = Progress =<br /> == Sep. 2014 ==<br /> start<br /> <br /> == Nov. 2016 ==<br /> The paper is accepted by SC2<br /> <br /> <br /> <br /> = 原文 =</div>

Xqt http://wiki.iiis.systems:9988/w/index.php?title=Projects&diff=403 2016-11-17T01:36:04Z

<p>Xqt: </p> <hr /> <div>* [[Projects:project_test | 项目示例]]<br /> * [[Projects:Owan | 光交换广域网]]<br /> * [[Projects:Stateless-DCN | 无状态数据中心网络]]<br /> * [[Projects:Stock-Prediction | 多数据源股市预测]]<br /> * [[Projects:CIDS | CIDS:Adapting legacy intrusion detection system to the cloud with hybrid sampling]]</div>

Xqt http://wiki.iiis.systems:9988/w/index.php?title=Projects&diff=402 2016-11-17T01:32:00Z

<p>Xqt: </p> <hr /> <div>* [[Projects:project_test | 项目示例]]<br /> * [[Projects:Owan | 光交换广域网]]<br /> * [[Projects:Stateless-DCN | 无状态数据中心网络]]<br /> * [[Projects:Stock-Prediction | 多数据源股市预测]]<br /> * [[Projects:CIDS | Adapting legacy intrusion detection system to the cloud with hybrid sampling]]</div>

Xqt http://wiki.iiis.systems:9988/w/index.php?title=Projects:project_test&diff=401 2016-11-17T01:30:09Z

<p>Xqt: /* 项目名称 */</p> <hr /> <div>= 项目名称 =<br /> 任何优雅的实现翻墙<br /> <br /> = 项目介绍 =<br /> 随着互联网的普及以及世界各国的交流愈发频繁，人们探知外界信息的欲望已十分强烈，但囿于种种因素，在现有实验环境下访问一些流行网站十分不便，因此如何优雅地翻墙已是一个亟待解决的问题<br /> <br /> 本项目以优雅翻墙为研究目的，使用xxx技术，彻底解决翻墙难、翻墙贵、流量受限以及经常掉线等问题，为广大翻墙爱好者提供一个舒适、高效的翻墙环境。<br /> <br /> = 参与人员 =<br /> Bill Gates<br /> <br /> Mark Elliot Zuckerberg<br /> <br /> Linus Benedict Torvalds<br /> <br /> = 相关资料 =<br /> <br /> = 项目进展 =<br /> == 2014年1月1日 ==<br /> 使用GoAgent<br /> <br /> == 2014年5月5日 ==<br /> 修改hosts<br /> <br /> == 2014年8月8日 ==<br /> 用IPv6<br /> <br /> == 2014年11月11日 ==<br /> 买VPN<br /> <br /> = 相关链接 =<br /> * [http://tieba.baidu.com/p/2678712311 GoAgent翻墙教程]<br /> <br /> * [http://ipv6.tsinghua.edu.cn 清华IPv6]<br /> <br /> * [http://www.360kb.com/kb/2_122.html 修改hosts]<br /> <br /> * [http://www.greenvpn.org 购买VPN]</div>

Xqt http://wiki.iiis.systems:9988/w/index.php?title=Projects:project_test&diff=400 2016-11-17T01:29:00Z

<p>Xqt: /* 项目名称 */</p> <hr /> <div>= 项目名称 =<br /> Adapting legacy intrusion detection systems to the cloud with hybrid sampling<br /> <br /> = 项目介绍 =<br /> 随着互联网的普及以及世界各国的交流愈发频繁，人们探知外界信息的欲望已十分强烈，但囿于种种因素，在现有实验环境下访问一些流行网站十分不便，因此如何优雅地翻墙已是一个亟待解决的问题<br /> <br /> 本项目以优雅翻墙为研究目的，使用xxx技术，彻底解决翻墙难、翻墙贵、流量受限以及经常掉线等问题，为广大翻墙爱好者提供一个舒适、高效的翻墙环境。<br /> <br /> = 参与人员 =<br /> Bill Gates<br /> <br /> Mark Elliot Zuckerberg<br /> <br /> Linus Benedict Torvalds<br /> <br /> = 相关资料 =<br /> <br /> = 项目进展 =<br /> == 2014年1月1日 ==<br /> 使用GoAgent<br /> <br /> == 2014年5月5日 ==<br /> 修改hosts<br /> <br /> == 2014年8月8日 ==<br /> 用IPv6<br /> <br /> == 2014年11月11日 ==<br /> 买VPN<br /> <br /> = 相关链接 =<br /> * [http://tieba.baidu.com/p/2678712311 GoAgent翻墙教程]<br /> <br /> * [http://ipv6.tsinghua.edu.cn 清华IPv6]<br /> <br /> * [http://www.360kb.com/kb/2_122.html 修改hosts]<br /> <br /> * [http://www.greenvpn.org 购买VPN]</div>

Xqt