Secure Cloud Computing: Continuous Anomaly Detection Approach in Legal Metrology

In the field of Legal Metrology, it shall be assured that all measurements are carried out by a trusted computer system. Securing Computer Systems, especially in a distributed environment can be a challenging task to comply, since, in such an environment, a measurement instrument cannot be simply disconnected to guarantee its security. Following the approach of continuous monitoring to derive a normal system behavior can ensure continuous anomaly detection to satisfy the needed demands of Legal Metrology. The proposed Anomaly Detection approach measures the severity of the detected incident and places it into three different categories: green, yellow and red. The presented module can detect attacks against distributed applications in a cloud computing environment, using pattern recognition techniques for clustering, as well as statistical approaches. Both, inexperienced and experienced attacks have been tested and results are presented.