Towards intrusion-resilient security monitoring in multi-cloud infrastructures

Multi-cloud architectures enable the design of resilient distributed Service applications. Such applications can benefit from a combination of intrusion-tolerant replication across clouds with intrusion detection and analysis mechanisms. Such mechanisms enable the detection of attacks that affect multiple replicas and thus exceed the intrusion masking capability,and in addition support fast reaction and recovery from local intrusions. In this work-in-progress paper we present a security Analysis on which an Intrusion detection and analysis service can be based on. We sketch the architecture of such a cross-cloud intrusion detection architecture that combines a set of wellknown mechanisms. The goal of our approach is obtaining a resource-efficient Service with optimal resilience against malicious attacks.