Analysis of Prevention Techniques against DDoS and SQL Injection Attack in Network and Cloud Environment

Besides other benefits, one of the main goals within cloud computing is to achieve scalability by continuously decreasing and increasing the number of networking resources such as virtual machines, databases, networks, storages and more, to match resource demands. In the other hand, it also allows organizations to reduce cost through enabled services that are designed to manage performances and storages. Cloud computing is defined on the concept of the internet, this means such networks are not immune to downtime infiltrated DDoS and SQL attacks, but also it can be compromised by attacks from outside. As the name suggests, Denial of service. This, including SQL attack’s Common Vulnerability and Exposures (CVE) base score, are usually rated high with critical severity classification, suggesting that its implications can be very damaging on the network. Shielding the network from such attacks requires maximum defensive methodologies, not just for protecting but also for mitigating purposes. Achieving such results means implementing processes that are relevant for detecting, containing, and mitigating DDoS and SQL attacks on the network. However, this may not be easy as some common challenges in detecting DDoS and SQL attacks have been blamed on unreliable and inconsistent false positive signals coming from different IDS and IPS tools. To get deeper into this we can divert the attention of this research, not only on how to track such alert sources, using selected IDS and IPS tools such that may include hardware or software respectively, through which we can validate its results in a comparative manner for the sake of differentiating false positives, against false negatives. Alternatively, we could achieve this purpose through educational learning methods and tools.