Abstract: Described embodiments provide for a cloud computing system with cloud services provided by several cloud service providers. Cloud service data is collected from sensors within each cloud service provider's service, and system models are developed based on the collected cloud service data. The user provides configuration data that is related to performance and cost objectives for the cloud computing system. Performance and cost predictions for the cloud computing system are generated based on the system models and the user configuration data; and then processed to provide a set of attributes and parameters for the cloud computing system. The set of attributes and parameters for the cloud computing system are presented to the user for selection. Based on the set of attributes and parameters, the cloud computing system operates by employing selected attributes and parameters from within a set of differing cloud service providers.

Abstract: A method, system and computer-readable media that enable the employment of an intrusion detection process are provided. This present invention is able to differentiate between certain malicious and benign incidents by means of a two-stage anomaly-based intrusion detection and prevention system. The invented system works at high-speed and with low-memory resources requirements. In particular, the invented method is implemented in a two-stage detector that performs coarse grain detection using sub-profiles 30A-30H (key features extracted from a profile) at one stage and fine grain (detailed behavioral profile) detection at another stage to eliminate unwanted attacks and false positives. Furthermore, in order to suppress specific alarms, the invented system allows the administrator to specify detailed profiles 32A-32H. By using a sub-profile extractor, a sub-profile is extracted, which is then downloaded into the coarse grain detector.