用AI分析云流水线异常流量,提升安全防护能力
Advancing Software Security and Reliability in Cloud Platforms through AI-based Anomaly Detection
- 结合CNN与LSTM分析网络流量模式
- 在两个数据集上达到超98%检测准确率
- 适合关注DevOps安全的工程师和研究人员
持续集成/持续部署(CI/CD)是现代软件开发的核心,支持代码快速高效地部署到云环境。然而,云环境中仍频发安全事件(如DDoS、Bot攻击、Log4j漏洞等),而现有研究多聚焦静态检测与CI/CD流程,较少关注通过网络流量分析识别攻击。本研究旨在通过人工智能实现异常检测,以提升CI/CD流水线安全性。系统将嵌入工作流,持续监控流水线活动与云基础设施。同时探索自适应响应机制以缓解威胁。研究采用CSE-CIC-IDS2018与CSE-CIC-IDS2017两个主流网络流量数据集,构建卷积神经网络(CNN)与长短期记忆网络(LSTM)相结合的模型,成功实现98.69%与98.30%的检测准确率,并生成反映不同流水线阶段异常行为的日志文件,为现代DevOps实践中的安全挑战提供有效解决方案。
原文摘要 · Abstract (English)
Continuous Integration/Continuous Deployment (CI/CD) is fundamental for advanced software development, supporting faster and more efficient delivery of code changes into cloud environments. However, security issues in the CI/CD pipeline remain challenging, and incidents (e.g., DDoS, Bot, Log4j, etc.) are happening over the cloud environments. While plenty of literature discusses static security testing and CI/CD practices, only a few deal with network traffic pattern analysis to detect different cyberattacks. This research aims to enhance CI/CD pipeline security by implementing anomaly detection through AI (Artificial Intelligence) support. The goal is to identify unusual behaviour or variations from network traffic patterns in pipeline and cloud platforms. The system shall integrate into the workflow to continuously monitor pipeline activities and cloud infrastructure. Additionally, it aims to explore adaptive response mechanisms to mitigate the detected anomalies or security threats. This research employed two popular network traffic datasets, CSE-CIC-IDS2018 and CSE-CIC-IDS2017. We implemented a combination of Convolution Neural Network(CNN) and Long Short-Term Memory (LSTM) to detect unusual traffic patterns. We achieved an accuracy of 98.69% and 98.30% and generated log files in different CI/CD pipeline stages that resemble the network anomalies affected to address security challenges in modern DevOps practices, contributing to advancing software security and reliability.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。