TY - JOUR
T1 - Adaptive protocols for hypervisor security in cloud infrastructure using federated learning-based anomaly detection
AU - Alazab, Moutaz
AU - Awajan, Albara
AU - Obeidat, Areej
AU - Faruqui, Nuruzzaman
AU - Bere, Aaron
AU - Ali, Saqib
AU - Wei, Wei
N1 - Publisher Copyright:
© 2025 Elsevier Ltd
PY - 2025/7/15
Y1 - 2025/7/15
N2 - A static security layer protecting the hypervisor from ever-evolving cyber attacks raises concerns about cloud computing security in the dynamic cybersecurity landscape. As cybercriminals modify their approaches, the security protocols should adapt accordingly. This paper introduces an adaptive communication protocol enhanced by federated learning (FL) to improve hypervisor security in cloud infrastructures. Federated learning is a decentralized machine learning (ML) approach that prevents data sharing while still allowing models to learn collaboratively across multiple hypervisors. Artificial Intelligence (AI)-based anomaly detection is incorporated into this framework to enhance hypervisor security in cloud infrastructures. The proposed system utilizes local and global anomaly detection models to dynamically adjust security protocols and protect hypervisors against threats such as hyperjacking, side-channel attacks, and virtual machine (VM) escape. Experimental results demonstrate the protocol's effectiveness, achieving a detection accuracy of 92.6%, significantly higher than the 85.2% from centralized learning and 78.4% from static protocols. Furthermore, the adaptive approach reduced communication overhead by 55% and training time by 32%, emphasizing its efficiency and operational performance. This research highlights the potential of integrating adaptive protocols with federated learning to enhance cloud security, offering a robust defense against evolving cyber threats.
AB - A static security layer protecting the hypervisor from ever-evolving cyber attacks raises concerns about cloud computing security in the dynamic cybersecurity landscape. As cybercriminals modify their approaches, the security protocols should adapt accordingly. This paper introduces an adaptive communication protocol enhanced by federated learning (FL) to improve hypervisor security in cloud infrastructures. Federated learning is a decentralized machine learning (ML) approach that prevents data sharing while still allowing models to learn collaboratively across multiple hypervisors. Artificial Intelligence (AI)-based anomaly detection is incorporated into this framework to enhance hypervisor security in cloud infrastructures. The proposed system utilizes local and global anomaly detection models to dynamically adjust security protocols and protect hypervisors against threats such as hyperjacking, side-channel attacks, and virtual machine (VM) escape. Experimental results demonstrate the protocol's effectiveness, achieving a detection accuracy of 92.6%, significantly higher than the 85.2% from centralized learning and 78.4% from static protocols. Furthermore, the adaptive approach reduced communication overhead by 55% and training time by 32%, emphasizing its efficiency and operational performance. This research highlights the potential of integrating adaptive protocols with federated learning to enhance cloud security, offering a robust defense against evolving cyber threats.
KW - Adaptive communication protocols
KW - Anomaly detection in cloud computing
KW - Artificial intelligence for cybersecurity
KW - Cloud computing security
KW - Federated learning for hypervisor security
KW - Virtualization technology and security
UR - http://www.scopus.com/inward/record.url?scp=105002564373&partnerID=8YFLogxK
U2 - 10.1016/j.engappai.2025.110750
DO - 10.1016/j.engappai.2025.110750
M3 - Article
AN - SCOPUS:105002564373
SN - 0952-1976
VL - 152
JO - Engineering Applications of Artificial Intelligence
JF - Engineering Applications of Artificial Intelligence
M1 - 110750
ER -