Fog-cloud distributed intrusion detection and cooperation

Cloud computing is becoming a promoted technology. Over the recent years, it has rapidly grown and its adoption is more and more increasing. Many enterprizes and organizations have immigrated their data to the cloud. However, the security of this technology is considered a serious barrier to guarantee the organizations' trust on it. Therefore, intrusion detection has been set as the best solution to secure the cloud platform. Thus, many research studies have been developed for the aim to create an effective and performing intrusion detection system suitable for the cloud environment. In this paper, we propose a new approach for cloud environment–based multilevel cooperation in terms of intrusion detection. It is based on the cooperation and the correlation between fog nodes at the beginning and then between fog and cloud technology. We also evaluate the performance and the efficiency of this proposed prototype in terms of detection rates and detection response to make real-time detection in the whole cloud platform. The results show that the proposed architecture introduces low false positive rate compared to the existing hybrid intrusion detection approach in cloud computing (HIDCC) framework.