A Streaming Intrusion Detection System for Grid Computing Environments

Authors:
Matthew Smith;Fabian Schwarzer;Marian Harbach;Thomas Noll;Bernd Freisleben
Affiliations:
-;-;-;-;-
Venue:
HPCC '09 Proceedings of the 2009 11th IEEE International Conference on High Performance Computing and Communications
Year:
2009

Citing 0
Cited 4

Real-time Grid monitoring based on complex event processing

Future Generation Computer Systems
Detecting Credential Abuse in the Grid Using Bayesian Networks

GRID '11 Proceedings of the 2011 IEEE/ACM 12th International Conference on Grid Computing
On-Line monitoring of service-level agreements in the grid

Euro-Par'11 Proceedings of the 2011 international conference on Parallel Processing - Volume 2
On-line grid monitoring based on distributed query processing

PPAM'11 Proceedings of the 9th international conference on Parallel Processing and Applied Mathematics - Volume Part II

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, a novel architecture for a streaming intrusion detection system for Grid computing environments is presented. Detection mechanisms based on traditional log-files or single host databases are replaced by a streaming database approach. The streaming architecture allows processing of temporal attack data across multiple sites and offers the potential for performance benefits in large scale systems, since data is processed during its natural flow and only stored as long as necessary for analysis. Two cross-site example attacks in a Grid environment and the streaming detection logic for these attacks are presented to illustrate the approach. Experimental results of a prototypical implementation are presented.