Authors:
Kassidy Clark
;
Martijn Warnier
and
Frances M. T. Brazier
Affiliation:
Delft University of Technology, Netherlands
Keyword(s):
Botnet, Click fraud, Cloud, Cloud services, DDoS, Extrusion detection, Intrusion detection, Security.
Related
Ontology
Subjects/Areas/Topics:
Cloud Computing
;
Cloud Computing Enabling Technology
;
Monitoring of Services, Quality of Service, Service Level Agreements
Abstract:
Many Cloud Service Providers (CSP) offer access to scalable, reliable computing resources following a pay-as-you-go model. Research into security of the Cloud focusses mainly on protecting legitimate users of Cloud services from attacks by external, malicious users. Little attention is given to prohibit malicious users from using the Cloud to launch attacks, such as those currently done by botnets. These attacks include launching a DDoS attack, sending spam and perpetrating click fraud. This paper discusses the threat of Cloud-based botnets, or botclouds and the need for new techniques to detect them. Two experiments show how simple and cheaply these attacks can be launched from botclouds.