Distributed architecture of snort IDS in cloud environment

Abstract

Intrusion Detection System (IDS) is the most used mechanism for intrusion detection. Traditional IDS have been used to detect suspicious behaviors in network communication and hosts. However, with the evolution of Intrusion detection datasets size, we faced a new challenge which is storing those large datasets in Cloud Infrastructure and analyzing datasets traffic using Big data technology. Furthermore, some Cloud providers allow deploying and configuring IDS for the user. In this paper, we will introduce an architecture based on Snort IDS in cloud computing with distributed intrusion detection datasets.