具隱私性的雲端偵測入侵系統

Intrusion Detection by Clouds with Privacy Preserving

鄭又銓(Yu-Chuan Cheng)

指導教授 ： 曾文貴

國立交通大學/資訊學院/網路工程研究所/碩士(2011年)

https://doi.org/10.6842/NCTU.2011.00120

摘要

雲端運算在最近幾年變得越來越熱門。然而，當使用者使用這些雲端服務時，有一些安全上的議題是需要被考慮到的。隱私權就是一個主要的問題在雲端運算上。使用者可能想要使用這些雲端服務，但同時地他們不希望關於他們私密性的資訊因此而洩漏出去。在這篇論文中我們提出一個方法不但可以提供入侵偵測的能力且同時能夠保護使用者的隱私性在雲上。我們結合了隱藏關鍵字搜尋和SNORT的規則來建構出我們的系統。最後我們做一些實驗來驗證此方法的效能和偵測率。

關鍵字

隱私 ； 雲端運算 ； 偵測入侵系統

並列摘要

Cloud computing has become popular in recent years. However, when users use these services, there are some security issues to be considered. The privacy issue is one of the main problems in cloud computing. Users want to make use of these services and simultaneously make sure that their sensitive information will not be leaked. In this paper, we propose an approach that not only provides an intrusion detection system, but also protects user’s privacy in the cloud. We combine hidden keyword search and SNORT rules to construct our system. Finally, we do experiments to evaluate the system performance and detection rates.

並列關鍵字

privacy ； cloud computing ； IDS

參考文獻

[2] D. Boneh, G. D. Crescenzo, R. Ostrovsky and G. Persiano, “Public Key Encryption with Keyword Search.” in proceedings of Eurocrypt 2004, LNCS 3027, 2004, pp. 506-522.

[3] F. Chang, J. Dean, S. Ghemawat, W. Hsieh, D. Wallach, M. Burrows, T. Chandra, A. Fikes, and R. Gruber, “Bigtable: A distributed storage system for structured data.” in Proceedings of the 7th USENIX Symposium on Operating Systems Design and Implementation, 2006.

[6] S. GHEMAWAT, H. GOBIOFF, and S. -T. LEUNG, "The google file system." in Proceedings of the nineteenth ACM symposium on Operating systems principles, 2003, pp. 29–43.

[7] C. Hazay and Y. Lindell, “Efficient protocols for set intersection and pattern matching with security against malicious and covert adversaries.” in 5th Theory of Cryptography Conference, volume 4948 of LNCS, 2008, pp. 155-175.

[8] R. A. Kemmerer, G. Vigna, "Intrusion detection: a brief history and overview." Computer Volume: 35 Issue: 4, 2002, pp.27 - 30.