@inproceedings{dec4b717fc25460b950f9f1952310d2f,
title = "Eagle: An agile approach to automaton updating in cloud security services",
abstract = "Automaton-based pattern matching methods have been widely used in security services for traffic inspection and filtering. However, a large scale of patterns may be updated frequently in a multi-tenant cloud, which poses new challenges to avoid attacks while updating new patterns. This paper presents an agile approach named Eagle for «on-the-fly» updating automaton in cloud security services. The approach provides three algorithms on AC and SBOM, adding, deleting and updating operation, to update state and links of automaton in high-speed online cloud traffic. Theoretical analysis shows that Eagle lowers the computational complexity of updating patterns from O (n2) to O (n). The effectiveness of this agile approach is verified when applied to a real cloud gateway. It turns out that 68\% - 89\% of the time can be saved and the throughput of cloud traffic filtering proves no reduction during and after the pattern update.",
keywords = "Cloud intrusion detection system, Cloud security, Update automaton",
author = "Hao Peng and Zhe Liu and Jie Shen and Xue Li and Hanteng Chen and Jianxin Li and Lu Liu",
note = "Publisher Copyright: {\textcopyright} 2016 IEEE.; IEEE Symposium on Service-Oriented System Engineering, SOSE 2016 ; Conference date: 29-03-2016 Through 01-04-2016",
year = "2016",
month = may,
day = "18",
doi = "10.1109/SOSE.2016.17",
language = "英语",
series = "Proceedings - 2016 IEEE Symposium on Service-Oriented System Engineering, SOSE 2016",
publisher = "Institute of Electrical and Electronics Engineers Inc.",
pages = "91--98",
booktitle = "Proceedings - 2016 IEEE Symposium on Service-Oriented System Engineering, SOSE 2016",
address = "美国",
}