Enhancement of Cloud Security Feature in OpenStack

OpenStack is an orchestration software that manages resources in the cloud platform. The cloud security is managed by a module named security groups in OpenStack. The OpenStack security groups feature has a few limitations, one of them being a static way for protecting the VM instances. The main objective of this paper is enhancing the OpenStack security groups feature. It provides a dynamic approach to restrict the access to VM instances from malicious hosts on the internet, which are obtained from Cisco Talos. These malicious IP addresses are stored in the binary search trees. Packet sniffing is used to obtain the IP addresses of the incoming packets and IP tables are used as firewalls to filter the incoming traffic and protect the VM instances.