METHOD FOR DETECTING SUSPICIOUS NODES IN A CLOUD-BASED VIRTUAL MACHINE (VM) ENVIRONMENT

Abstract

ABSTRACT A method (100) for detecting suspicious nodes in a cloud-based virtual machine (VM) environment. Further, the method comprising collecting performance metrics from a plurality of virtual machines, including CPU usage, memory utilization, and network traffic. Further, the method (100) comprising the steps of applying a sliding window analysis to the collected performance metrics to identify trends and anomalies. Further, the method (100) comprising the steps of utilizing an interquartile range (IQR) statistical method to establish dynamic thresholds for identifying outliers indicative of suspicious behaviour. Further, the method (100) comprising the steps of integrating fuzzy logic to classify performance metrics into normal and abnormal behaviour based on the established thresholds. Further, the method (100) comprising the steps of generating alerts for potential suspicious nodes and providing a user interface fo

Specification

Description:FIELD OF THE DISCLOSURE
[0001] This invention generally relates to the field of cloud computing and virtual machine monitoring, and in particular, relates to a method for detecting suspicious nodes in cloud-based virtual machines using trust mechanisms and advanced anomaly detection techniques to enhance security and operational efficiency.
BACKGROUND
[0002] The subject matter discussed in the background section should not be assumed to be prior art merely as a result of its mention in the background section. Similarly, a problem mentioned in the background section or associated with the subject matter of the background section should not be assumed to have been previously recognized in the prior art. The subject matter in the background section merely represents different approaches, which in and of themselves may also correspond to implementations of the claimed technology.
[0003] The rapid adoption of cloud computing has transformed how organizations deploy and manage their IT resources. Virtual machine , Claims:1. A method (100) for detecting suspicious nodes in a cloud-based virtual machine (VM) environment, the method comprising the steps of:
collecting performance metrics from a plurality of virtual machines, including CPU usage, memory utilization, and network traffic;
applying a sliding window analysis to the collected performance metrics to identify trends and anomalies;
utilizing an interquartile range (IQR) statistical method to establish dynamic thresholds for identifying outliers indicative of suspicious behaviour;
integrating fuzzy logic to classify performance metrics into normal and abnormal behaviour based on the established thresholds; and
generating alerts for potential suspicious nodes and providing a user interface for real-time monitoring of VM performance and alerts.

2. The method (100) as claimed in claim 1, wherein the trust mechanisms further include evaluating the reliability of the virtual machines based on historical performance data and user-defined trust policies.

Documents