kindly Read through abstracts,copy edith and give to your surpervisor....
PROJECT TOPIC: INTRUSION DETECTATION SYSTEM USING SOFTWARE DEFINED NETWORK (SDN)
Department: Computer Science
FORMART: MS WORD
PAGES: 82 pages, abstract, chapter 1-5 , APENDIX A source code and APENDIX B output, well reserached and supervised
Get Complete Work
Software-defined networking (SDN) technology is a novel approach to cloud computing that facilitates network management and enables programmatically efficient network configuration in order to improve network performance and monitoring. However, this has its own disadvantage which are porosity of the network and all of that. The essence of this project work is to develop an intrusion detection system to curb the activities of intruders into the open network system. Since Software-defined networking is associated with cloud computing, the system will tend to project any cloud based transaction done within the network platform. In this regard Cloud Computing is a new type of service which provides large scale computing resource to each customer. Cloud Computing systems can be easily threatened by various cyber attacks, because most of Cloud Computing systems provide services to so many people who are not proven to be trustworthy. Therefore, a Cloud Computing system needs to contain some Intrusion Detection Systems (IDSs) for protecting each Virtual Machine(VM) against threats. Mostly, the threats are done on the database of the system. This brought an analysis on database intrusion system which is a database security mechanism to guard data, the most valuable assets of an organization. Intrusion detection can be classified into anomaly and misuse intrusion detection. It also has a problem of generating false positive and false negative alarms. Therefore, the aim of this research work is to build an Intrusion detection system using Software-defined networking. Questionnaire and interview were used for data collection. For the design, waterfall methodology was adopted using php and mysql for programming. Functional testing was used for the testing. The results show that the system is able to detect intruders by using their existing system network behaviour like the ip addresses. This approach enhances the database security by generating more selective rules, and providing faster decision, faster performance.
1.1 Background of the study
The deployment of information technology in all works of life has made many companies to find ways to decrease IT cost and overcome economic recession. Software-defined networking (SDN) technology is a novel approach to cloud computing that facilitates network management and enables programmatically efficient network configuration in order to improve network performance and monitoring and also intrusion detection McCanne, (2010).
Software Defined Network (SDN) was commonly associated with the Open Flow protocol (for remote communication with network plane elements for the purpose of determining the path of network packets across network switches) since the emergence in 2011- 2012, however many companies have moved away from Open-Flow, and have embraced different techniques in cloud computing environment. Cloud Computing service is a new computing paradigm in which people only need to pay for use of services without cost of purchasing physical hardware whereby shared resources, software, and information are provided to computers and other devices on demand.
It is efficient and cost economical for consumers to use computing resources as much as they need or use services they want from Cloud Computing provider.
Since software-defined networking is in relation with Cloud Computing which is subject to several accidental and intentional security threats, including threats to the integrity, confidentiality and availability of its resources, data and infrastructure Berge, (2002). Cloud Computing has been rapidly developed along with the trend of IT services which has been recently more spotlighted than other computing services because of its capacity of providing unlimited amount of resources. Moreover, consumers can use the services wherever Internet access is possible. Cloud Computing systems have a lot of resources and private information, therefore they are easily threatened by attackers were System administrators potentially must protect the systems safely against both insiders and outsiders. IDS are one of the most popular devices for protecting Cloud Computing systems from various types of attack. Cloud Computing systems are used by many people, therefore, they generate huge amount of logs. One way to make data less vulnerable to malicious attack is to deploy an intrusion detection system (IDS). Intrusion detection is the unrelenting active attempts in discovering or detecting the presence of intrusive/unauthorized activities. Traditionally, Intrusion Detection has been performed at the network perimeter, with a focus on detecting known attack signatures and behavioral anomalies. IDS appliances and software have become increasingly more sophisticated, starting to evolve into Intrusion Prevention Systems that block malicious traffic before it is allowed past the network perimeter. These systems provide a high level of protection from a number of network based attacks. An intrusion detection system is a device or software application that monitors network or system activities for malicious transactions or policy violations and produces reports to a management station. To detect attacks, the IDS is configured with a number of signatures that support the detection of known intrusions Chitturv, A. (2005). Unfortunately, it is not a trivial task to keep intrusion detection signatures up to date because a large number of new intrusions take place daily. To overcome this problem, the IDS should be coupled with anomaly detection schemes, which support detection of new attacks. The IDSs cause early detection of attacks and therefore make the recovery of lost or damaged data simpler. Many researchers are working on increasing the intrusion detection efficiency and accuracy, but most of these efforts are to detect the intrusions at network or operating system level. They are not capable of detecting malicious transactions in databases.
1.2 Statement of the Problem
The fully distributed and open structure of cloud computing and services becomes an even more attractive target for potential intruders Peter Mell, (2007). Database intrusion has posed a very big problem to many organizations as data remains the most important assets to any organization. Intrusion detection systems have monitored by either insider or outsider attacks. As systems have migrated from mainframe to client-server and multitier web application environments, the criticality of protecting the relational database has grown steadily over the last decade. Therefore, database intrusion can lead to:
(i)Loss of confidentiality, integrity and availability of a database as consumers of information (e.g., employees, customers and business partners) all demand instant access to data in a near real-time and accurate manner.