This project is a modular, layered security framework designed to secure multi-tenant cloud environments. It integrates advanced access control, encryption, intrusion detection (signature + ML), and real-time visualization using open-source tools.
- ✅ Strong tenant isolation (VLAN + VM segmentation)
- ✅ Fine-grained access control (RBAC, ABAC, XACML)
- ✅ Tokenization & TLS encryption for sensitive data
- ✅ Hybrid Intrusion Detection System (Snort + Isolation Forest)
- ✅ Centralized, real-time dashboard using ELK + Grafana
- ✅ Evaluation framework for performance and compliance (ISO/NIST)
multi-tenant-cloud-security/
├── access_control/ # RBAC, ABAC, XACML logic
├── dashboard/ # Dockerized ELK + Grafana
├── docs/ # Architecture diagrams, instructions
├── encryption/ # Tokenization scripts, TLS setup
├── evaluation/ # Performance metrics, attack logs
├── ids/ # Snort rules + ML (Isolation Forest)
├── segregation/ # KVM + VLAN provisioning
├── scripts/ # Auto-setup, IDS trainer, deployment
- Python (Flask, Scikit-learn)
- Snort 3 (signature-based IDS)
- Isolation Forest (ML-based anomaly detection)
- WSO2 Balana (XACML PDP)
- Open vSwitch + KVM (network isolation)
- ELK Stack (Elasticsearch, Logstash, Kibana)
- Grafana (visual dashboards)
- Docker & Docker Compose
- Python 3.x + pip
- Git
- Git Bash (for Windows users)
- KVM + Open vSwitch (for tenant simulation)
-
Clone the repo:
git clone https://github.com/siogene/multi-tenant-cloud-security.git cd multi-tenant-cloud-security -
Start the dashboard:
cd dashboard docker-compose up -d -
Run the ABAC engine:
python access_control/abac_engine.py
-
Train the ML-IDS:
python ids/train_model.py
Kibana: http://localhost:5601
Grafana (if configured): http://localhost:3000
Includes:
- IDS Alert heatmaps
- Access decision logs
- Resource usage by tenant
- Tokenization/decryption audit logs
| Feature | Precision | Recall | F1-Score |
|---|---|---|---|
| Snort | 91% | 84% | 87.3% |
| IsolationForest | 88% | 89% | 88.5% |
| Hybrid IDS | 95% | 93% | 94.1% |
This project is licensed under the Apache 2.0 License.
Saugat — as part of a research dissertation on securing multi-tenant cloud environments.
Pull requests are welcome! Please open an issue first to discuss major changes.