A Dependable Intrusion Detection Architecture Based on Agreement Services

Efficient Agreement Protocols in Asynchronous Distributed Systems

“…If it detects some differences among the responses, it raises an alarm. We showed in [31] that this solution guarantees confidentiality and integrity.…”

“…In the context of a project called DADDI, we have designed an architecture which provides an IDS (Intrusion Detection System) component in charge of detecting intrusions in an information system by comparing the outputs delivered by several diverse Web servers [31,59]. The architecture (see Figure 6.7) is organized as follows.…”

“…It is in charge of broadcasting the requests to the set of diverse Web servers. In [31], we proposed a solution in which each request to be submitted to the Web servers is only addressed to the leader of the group of reverse proxies. In this particular approach, the leader is the unique member of the group to propose value and hence the R O optimization is effective as no conflict could happen.…”