# Preventing the Cloud Networks through Semi-Supervised Clustering from Both Sides Attacks
## 1 Introduction

Table 1: Growth rate of malware attacks. Figure 1: The ratio of malware from 2009 to 2018 (in millions). * In 2009, the ratio of malware was 12.4 million;
* In 2010, the malware ratio increased from 12.4 million to 29.97 million;
* In 2011, the malware ratio increased from 29.97 million to 48.17 million;
* In 2012, the malware ratio increased from 48.17 million to 82.62 million;
* In 2013, the malware ratio increased from 82.62 million to 165.81 million;
* In 2014, the malware ratio increased from 165.81 million to 308.96 million;
* In 2015, the malware ratio increased from 308.96 million to 452.93 million;
* In 2016, the malware ratio increased from 452.93 million to 580.40 million;
* In 2017, the malware ratio increased from 580.40 million to 702.06 million;
* In 2018, the malware ratio increased from 702.06 million to 812.67 million. Cloud security is needed to protect the cloud from intrusions and attacks. An intruder can never easily and quickly access cloud data but can try to access data without permission. To resolve this issue, firewalls were used on various Personal Computers (PCs) in the network. Firewalls have different rules and policies to protect the Cloud Personal Computers (PCs) from attacks. The network PC can prevent some intrusions, but firewalls alone are not enough to protect the network from intrusions [18]. The best way to protect the cloud from intrusions is an Intrusion Detection System [19]. An intrusion detection system is a technique that monitors all malicious activity on the network and protects the cloud from all such activity [20]. IDS has attracted many researchers. An IDS can protect all networks and their components [21]. When cloud servers are attacked, the biggest problem is IDS integrity, maintenance, and availability [22]. Different techniques are used to protect cloud networks from attacks, including general threat reporting, signature matching, and anomaly detection and prevention systems [23]. Cloud servers have data encryption mechanisms to protect data from unauthorized access or misuse [24]. Sensitive data encryption is a method that encrypts data and requires a decryption mechanism to access the data, after which access to the data is possible [25]. Extensive mechanisms are available to provide security to the network. These include data encryption, access control systems, data backups, authentication, and permissions. The contribution of this paper is as follows:  
Developed a tool to protect the cloud from internal and external attacks and used a Signature-Based Intrusion Detection System (SIDS) and network sensors as a gateway to protect the cloud from the external side;  
Applied Signature-Based Intrusion Detection System and network sensors in parallel and monitored all malicious activity outside the network;  
Applied user verification through _Access Control System_ (_ACS_) if someone attacks from inside the cloud server or tries to misuse the cloud shell;  
Used Cloud Shell with \"_rvx-mode_\" to provide internal security in which each user's access will be different from the other users;  
Prevented cloud server attacks to protect the cloud servers from inside and outside attacks while comparing the existing techniques.