Early Detection of Distributed Denial of Service in Cloud Computing Using Quantum-Enhanced Knowledge Distillation Framework

Cloud computing is one of the essential computing platforms for modern enterprises. About 98 percent of large businesses will use cloud computing services in 2025 to enable remote working. The highly distributed structures of cloud computing are prone to attacks starting from weakened access control to data breaches. The sources making cloud systems vulnerable to attacks are public accessibility, auto scaling, and shared form of network architecture. Distributed Denial of Service (DDoS) is one of the most serious forms of attacks where multiple botnets get created simultaneously and flood massive requests for the cloud services. If the DDoS attack is not identified early it leads to the unavailability of cloud services, increased cost of migration, exhaustion of resources, and frequent violations of Service Level Agreements (SLAs). Hence, there is a need to detect DDoS at an early stage. Traditional machine learning models demand high computational power and larger memory capacity which make it unsuitable for a real-time cloud environment. This limitation is overcome by presenting a novel Quantum-Enhanced Knowledge Distillation framework (QKD) to detect DDoS attacks in cloud systems. QKD is a highly potential form of architecture which uses quantum computing to enhance the knowledge transfer between teacher and student models. The knowledge is extracted from the teacher model and quantum encoding of knowledge is performed. The complex correlation between the features of the traffic is extracted by applying the entanglement gates. The student model is trained considering the distillation loss and optimized until convergence. The simulation of the QKD is performed using DynamicCloudSim 3.0.3 simulator considering benchmark dataset CIC-DDoS2019and the performance is further validated using expected value analysis methodology. The performance of QKD is found to be promising toward performance metrics such as packet loss rate, attack detection time, attack recovery ratio, bandwidth utilization, and response time.