Defending Attacks on Cloud Computing

Abstract

Malwares are increasing rapidly. The nature of distribution and effects of malwares attacking several applications requires a real-time response. Therefore, a high performance detection platform is required. In this thesis, Hadoop is utilized to perform static binary search and detection for malwares and viruses in portable executable files deployed mainly on the cloud. Hadoop was chosen as it is a software platform that allows designing applications capable of handlinghuge data amounts in a parallel mannerin large clusters. The thesis presents an approach used to map the portable executable files to Hadoop compatible files. The Boyer–Moore-Horspool Search algorithm is modified to benefit from the distribution of Hadoop. The performance of the proposed model is evaluated using a standard virus database and the system is found to outperform similar platforms. Keywords: Cloud computing, Security issues, Malware, Static Binary Search, BMH, Hadoop.