Skip to main content
Top

2013 | OriginalPaper | Chapter

The Design of a Policy-based Attack-Resilient Intrusion Tolerant System

Authors : Jungmin Lim, Yongjoo Shin, Seokjoo Doo, Hyunsoo Yoon

Published in: Information Technology Convergence

Publisher: Springer Netherlands

Activate our intelligent search to find suitable subject content or patents.

search-config
loading …

Abstract

In order to identify and reduce the chance of vulnerability, a novel policy-based intrusion tolerant system (ITS) is studied in this paper. The suggested scheme quantifies the vulnerability level first, and then applies it to decide the candidate of the next rotation based on a policy. Experiments using CSIM 20 proved that it has enough capability to hide the VM rotation pattern which attackers are generally interested in and reduces the data leakage of the system greatly in spite of increasing the number of exposures.

Dont have a licence yet? Then find out more about our products and how to get one now:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 340 Zeitschriften

aus folgenden Fachgebieten:

  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Versicherung + Risiko




Jetzt Wissensvorsprung sichern!

Literature
1.
go back to reference Miguel C, Paulo V, Nuno FN (2004) The architecture of a secure group communication system based on intrusion tolerance. In: Proceedings of the 2001 international conference on distributed computing systems workshop (ICDCS 2001), Arizona, USA, April 2001 Miguel C, Paulo V, Nuno FN (2004) The architecture of a secure group communication system based on intrusion tolerance. In: Proceedings of the 2001 international conference on distributed computing systems workshop (ICDCS 2001), Arizona, USA, April 2001
2.
go back to reference Lala JH (2003) Organically assured & survivable information systems (OASIS): foundations of intrusion tolerant systems. IEEE Computer Society Press, http://computer.org/cspres, ISBN 0-7695-2057-X2003 Lala JH (2003) Organically assured & survivable information systems (OASIS): foundations of intrusion tolerant systems. IEEE Computer Society Press, http://​computer.​org/​cspres, ISBN 0-7695-2057-X2003
3.
go back to reference Quyen N, Arun S (2010) Comparative analysis of intrusion-tolerant system architectures. In: IEEE security and privacy. Preprint. Accepted for publication, Aug Quyen N, Arun S (2010) Comparative analysis of intrusion-tolerant system architectures. In: IEEE security and privacy. Preprint. Accepted for publication, Aug
4.
go back to reference Quyen N (2010) Realizing S-reliability for services via recovery-driven intrusion tolerance mechanism. In: International conference on dependable systems and networks workshops (DSN-W) Quyen N (2010) Realizing S-reliability for services via recovery-driven intrusion tolerance mechanism. In: International conference on dependable systems and networks workshops (DSN-W)
9.
go back to reference Schwetman H (2001) CSIM19: a powerful tool for building system models. In: Proceedings of the 2001 winter simulation conference, pp 250–255 Schwetman H (2001) CSIM19: a powerful tool for building system models. In: Proceedings of the 2001 winter simulation conference, pp 250–255
10.
go back to reference David P, Arun KS (2010) An intrusion tolerance approach to enhance single sign on server protection. In: Proceedings of the third international conference on dependability (DEPEND 2010) Venice/Mestre, 18–25 July David P, Arun KS (2010) An intrusion tolerance approach to enhance single sign on server protection. In: Proceedings of the third international conference on dependability (DEPEND 2010) Venice/Mestre, 18–25 July
11.
go back to reference Yih H, David A, Arun S (2006) Closing cluster attack windows through server redundancy and rotations. In: Proceedings of the second international workshop on cluster security (Cluster-Sec06), Singapore, May Yih H, David A, Arun S (2006) Closing cluster attack windows through server redundancy and rotations. In: Proceedings of the second international workshop on cluster security (Cluster-Sec06), Singapore, May
Metadata
Title
The Design of a Policy-based Attack-Resilient Intrusion Tolerant System
Authors
Jungmin Lim
Yongjoo Shin
Seokjoo Doo
Hyunsoo Yoon
Copyright Year
2013
Publisher
Springer Netherlands
DOI
https://doi.org/10.1007/978-94-007-6996-0_45