# Preventing the Cloud Networks through Semi-Supervised Clustering from Both Sides Attacks
## 2 Literature Review  
[PERSON] et al. [26] proposed a network-based architecture. In this architecture, the author worked on a tool called snort. The author used two cloud servers in this network, Virtual Machine Based Rootkit-1 (VMBR1) and Virtual Machine Based Rootkit-2 (VMBR2). Virtual Machine Based Rootkit-1 and Virtual Machine Based Rootkit-2 connect the cloud server-1 with cloud server-2 using switch-2. The authors placed an IDS in three different scenarios. In the first scenario, IDS is placed outside the cloud server. In the second scenario, IDS is placed inside the cloud server. In the third scenario, the IDS is set on both sides of the cloud servers. To detect escalating attacks, eth-0 and eth-1 are used. After the placement of IDS in different scenarios, it was attacked several times. To show the performance of IDSs, they created truth tables. At the end of the paper, the authors checked the effect of the Central Processing Unit (CPU) and Random Access Memory (RAM) during the execution of snort. [PERSON] et al. [27] surveyed various IoT (Internet of Things) papers and discussed how the mobile industry and the Internet have been growing too fast over the years. The set technologies have created a lot of convenience for the user, but more than that, the chances of attacks on their data are increasing. To address this issue, the system is classified into NIDS and HIDS. After that, an Architecture was developed for the set of techniques, including the stand-alone Intrusion Detection Support System, the Mutual Interference Detection Support System, and the Decentralized Intrusion Detection Support System. Discussing security of each phase is critical during the installation of the Intrusion Detection System in cloud computing. If the gateway of the Intrusion Detection System is strengthened, the number of attacks will be reduced. [PERSON] et al. [28] analyzed the efficiency of various machine learning algorithms to detect inside botnet attacks. The algorithms used in this article are Support Vector Machine (SVM), Naive Bayes, and Unsupervised Learning Algorithms. The Transmission Control Protocol (TCP) dump packet analyzer tool is used to capture the packets and extract their features. Two datasets, UNBS-NB 15 and KDD99, are used to check the efficiency of algorithms. After that, different results have been observed: Unsupervised Learning Algorithm: 94.78%, Support Vector Machine: 84.32%, and Naive Bayes: 71.63%, and it has been concluded that Unsupervised Learning Algorithms can detect better attacks with higher accuracy. [PERSON] et al. [29] worked on the growing cloud security issues and how to protect the cloud from the initial level. This article explores cloud servers' security threats, vulnerabilities, and security models. The cloud can store all kinds of data and be accessed from any node. However, data security is one of the most significant growth issues in the cloud. According to the author, each technology consists of two stages. One stage leads to success, and the other stage leads to challenges. Even in the case of cloud computing, cloud end users are facing a variety of security issues. Data leaks, non-standardization, malware injections, and data breaches can lead to security issues. At the end of the paper, the significant issues of cloud computing faced by end-users and discussed some cloud threats that can damage the cloud servers. [PERSON] [30] surveyed various papers, collected and compared all the datasets and algorithms used in these papers, and discussed that an intrusion detection system is an effective tool to monitor and prevent all malicious activity on the network. The author used the Pareto principle to secure the cloud from the outside and used three effective techniques of the Intrusion Detection System (Signature-Based Intrusion Detection System, Anomaly-Based Intrusion Detection System, Network-Based Intrusion Detection System). According to the author, attack rates will be lower if cloud servers provide external security.