Wyszukiwanie zaawansowane ?

Obiekt

Network Threat Detection in IaaS Environments Based on Flow Log Data, Journal of Telecommunications and Information Technology, 2026, nr 3
Pobierz

Tytuł: Network Threat Detection in IaaS Environments Based on Flow Log Data, Journal of Telecommunications and Information Technology, 2026, nr 3

Autor:

Wójcik, Hubert ; Roszkowski, Mirosław ; Mycek, Andrzej

Data wydania:

2026, nr 3

Typ zasobu:

artykuł

Tytuł publikacji grupowej:

2026, nr 3, JTIT-artykuły

Opis:

kwartalnik

Abstrakt:

The rapid growth of cloud services has led security monitoring to rely mainly on limited telemetry data furnished by cloud service providers. Flow logs, such as VPC Flow Logs in Amazon Web Services, are one of the key sources of information about network traffic in IaaS environments. In this study, a fully automated experimental environment was designed and deployed in the AWS cloud using the infrastructure-as-a-code approach with Terraform. The environment includes a virtual network, flow logging mechanisms, and controlled attack scenarios generating characteristic traffic patterns, such as port scanning, brute-force authentication attempts, and data exfiltration. The collected data was analyzed using cloud-native tools, in particular Amazon Athena, which enabled a detailed investigation of anomaly detection based on flow-level metrics. The results confirm that selected threats can be effectively detected using traffic metadata, including the number of unique destination ports, the repetition of communication attempts, the volume of transferred data and the temporal regularity of flows. The analysis demonstrates that flow logs alone are not sufficient to clearly distinguish between malicious activity and legitimate operations with similar characteristics, highlighting inherent limitations of telemetry in the IaaS model. The paper outlines directions for future work, including correlation with additional log sources and integration with ML models to improve detection accuracy and reduce false positives.

Tom:

105

Numer:

3

Wydawca:

National Institute of Telecommunications

Identyfikator zasobu:

oai:bc.itl.waw.pl:2475

DOI:

10.26636/jtit.2026.3.2628

eISSN:

1899-8852

Źródło:

Journal of Telecommunications and Information Technology

Język:

ang

Prawa:

Biblioteka Naukowa Instytutu Łączności

Licencja:

CC BY 4.0

Właściciel praw:

Biblioteka Naukowa Instytutu Łączności

Temat i słowa kluczowe:

AWS cloud security IaaS intrusion detection network traffic analysis

Kolekcje, do których przypisany jest obiekt:

Data ostatniej modyfikacji:

2 paź 2026

Data dodania obiektu:

2 paź 2026

Liczba wyświetleń treści obiektu:

1

Wszystkie dostępne wersje tego obiektu:

https://bc.itl.waw.pl/publication/2798

Wyświetl opis w formacie RDF:

RDF

Wyświetl opis w formacie OAI-PMH:

OAI-PMH

Nazwa wydania Data
Wójcik, Hubert; Roszkowski, Mirosław; Mycek, Andrzej, Network Threat Detection in IaaS Environments Based on Flow Log Data, Journal of Telecommunications and Information Technology, 2026, nr 3 2 paź 2026

Obiekty Podobne

2023, nr 4, JTIT-artykuły
2023, nr 4, JTIT-artykuły
Monitoring, Management, and Analysis of Security Aspects of IaaS Environments, Journal of Telecommunications and Information Technology, 2023, nr 4

Mycek, Andrzej

2023
artykuł
Anomaly Detection Framework Based on Matching Pursuit for Network Security Enhancement, Journal of Telecommunications and Information Technology, 2011, nr 1

Hołubowicz, Witold Renk, Rafał

2011, nr 1
artykuł
Intrusion Detection in Heterogeneous Networks of Resource-Limited Things, Journal of Telecommunications and Information Technology, 2015, nr 4

Marks, Michał Kozakiewicz, Adam Lasota, Krzysztof

2015, nr 4
artykuł
Detecting Password File Theft using Predefined Time-Delays between Certain Password Characters, Journal of Telecommunications and Information Technology, 2017, nr 4

Mahmoud, Khaled W. Makableh, Alaa Mansour, Khalid

2017, nr 4
artykuł
2025, nr 4, JTIT-artykuły
2025, nr 4, JTIT-artykuły
Lightweight Flow-based Anomaly Detection for IoT Using HC-MTDNN: A Hierarchically Cascaded Multitask Deep Neural Network, Journal of Telecommunications and Information Technology, 2025, nr 4

Beghoura, Mohamed Amine Belouche, Younes

2025, nr 4
artykuł
Battery Drain Denial-of-Service Attacks and Defenses in the Internet of Things, Journal of Telecommunications and Information Technology, 2019, nr 2

Logothetis, Michael D. Vassilakis, Vassilios G. Ioulianou, Philokypros P.

2019, nr 2
artykuł
2026, nr 2, JTIT-artykuły
2026, nr 2, JTIT-artykuły
Federated Learning for Low-rate DDoS Detection in Multi-controller Software Defined Networks: A Meta Analysis, Journal of Telecommunications and Information Technology, 2026, nr 2

Kartadie, Rikie Marpanaji, Eko Abadi, Agus Maman

2026, nr 2
artykuł
Markov Decision Process based Model for Performance Analysis an Intrusion Detection System in IoT Networks, Journal of Telecommunications and Information Technology, 2021, nr 3

Kalnoor, Gauri S, Gowrishankar

2021, nr 3
artykuł
Więcej
×

Cytowanie

Styl cytowania:

Dane kontaktowe

Adres

Instytut Łączności – Państwowy Instytut Badawczy ul. Szachowa 1 04-894 Warszawa

Telefon

(+48) 5128 696

E-Mail

biblioteka@il-pib.pl

Odwiedź nas!

Ta strona wykorzystuje pliki 'cookies'. Więcej informacji