Implementation of Network Intrusion Detection System (NIDS) in Open Cloud Computing Security System

Abstract

Security is the most important part of the computer network technology system. Among the technologies that utilize the network is cloud computing. One cloud computing provider such as Eucalyptus uses a firewall for system security. The use of a firewall on the system cannot monitor and analyze traffic on the cloud server and does not provide a warning when an attack occurs. The purpose of this study is that researchers will implement a network intrusion detection system (NIDS) in a cloud computing environment and mirroring traffic on switches. Intrusion detection system (IDS) is a security technology that is able to analyze network traffic and detect traffic if an attack is indicated. NIDS is placed on a different host from the cloud computing server. With the traffic mirroring method on the switch, traffic will be directed to NIDS so that NIDS is able to record all network traffic originating from outside the cloud server or traffic between virtual machines inside the cloud server. The results of testing attacks with 2 scenarios, namely attacks from outside and from within the cloud system, then NIDS is able to provide alert responses for attack traffic.