000 03797ntm a2200373 i 4500
001 vtls000105497
003 KUKTEM
005 20251117113410.0
008 190221t20182018my da f am 000 0 eng d
020 _aTHE0001080(Local)
039 9 _a201905171103
_bnazirah
_y201902211245
_znazri
040 _aUMP
_beng
_cUMP
_erda
090 _aFSKKP .A49 2018 r Thesis
100 1 _aAl-Zarqawee, Aws Naser,
_eauthor.
245 1 2 _aA classifier mechanism for host based intrusion detection and prevention system in cloud computing environment /
_cAws Naser Al-Zarqawee
264 1 _aKuantan, Pahang :
_bUMP,
_c2018
264 4 _c© 2018
300 _axvi, 113 pages :
_billustrations (some color), chart ;
_c30 cm. +
_e1 CD-ROM
336 _atext
_2rdacontent
336 _atext
_2rdacontent
337 _aunmediated
_2rdamedia
337 _acomputer
_2rdamedia
338 _avolume
_2rdacarrier
338 _acomputer disc
_2rdacarrier
347 _atext file
_bPDF
_2rda
500 _aFaculty of Computer Systems and Software Engineering
502 _aThesis (Doctor of Philosophy) -- Universiti Malaysia Pahang – 2018
504 _aIncludes bibliographical references
520 3 _aDistributed denial-of-service (DDoS) attacks are incidents in a cloud computing environment that cause major performance disturbances. Intrusion-detection and prevention system (IDPS) are tools to protect against such incidents, and the correct placement of ID/IP systems on networks is of great importance for optimal monitoring and for achieving maximum effectiveness in protecting a system. Even with such systems in place, however, the security level of general cloud computing must be enhanced. More potent attacks attempt to take control of the cloud environment itself; such attacks include malicious virtual-machine (VM) hyperjacking as well as traditional network-security threats such as traffic snooping (which intercepts network traffic), address spoofing and the forging of VMs or IP addresses. It is difficult to manage a host-based IDPS (H-IDPS) because information must be configured and managed for every host, so it is vital to ensure that security analysts fully understand the network and its context in order to distinguish between false positives and real problems. For this, it is necessary to know the current most important classifiers in machine learning, as these offer feasible protection against false-positive alarms in DDoS attacks. In order to design a more efficient classifier, it is necessary to develop a system for evaluating the classifier. In this thesis, a new mechanism for an H-IDPS classifier in a cloud environment has desigend. The mechanism’s design is based on the hybrid Antlion Optimization Algorithm (ALO) with Multilayer Perceptron (MLP) to protect against DDoS attacks. To implement the proposed mechanism, we demonstrate the strength of the classifier using a dimensionally reduced dataset using NSL-KDD. Furthermore, we focus on a detailed study of the NSL-KDD dataset that contains only selected records. This selected dataset provides a good analysis of various machine-learning techniques for H-IDPS. The evaluation process H-IDPS system shows the increases of intrusion detection accuracy and decreases the false positive alarms when compared to other related works. This is epitomized by the skilful use of the confusion matrix technique for organizing classifiers, visualizing their performance, and assessing their overall behaviour.
610 2 0 _aFaculty of Computer Systems and Software Engineering
_xDissertations
650 0 _aUniversities and colleges
_xDisertations
650 0 _aTheses
999 _aVIRTUA40
_c7991
_d7997
999 _aVTLSSORT0080*0200*0400*0900*1000*2450*2640*2641*3000*3360*3361*3370*3371*3380*3381*3470*5000*5020*5040*5200*6100*6500*6501*9992