A Survey on Intrusion-Tolerant System

Abstract

Many information systems that provide useful services to people are connected to the Internet for convenience and efficiency. However, improper accessibility might make the systems susceptible to a variety of attacks. Although existing security solutions such as an intrusion detection system, intrusion prevention system, and firewalls have been designed to protect against such attacks, it is impossible to block all kinds of attacks. Furthermore, most of the proposed solutions require information about attacks for efficient prevention. Research on intrusion-tolerant systems (ITSs) have been conducted in order to continue providing proper services in threatening environments. The purpose of an ITS is to survive against every intrusion, rather than to prevent them. In this paper, previous studies on ITS are introduced and classified according to the centric scheme as middleware-based ITS, hardware-based ITS, and recovery-based ITS. Recent research focusing on adaptive transformation schemes is also introduced.Jungmin Lim received a master degree in electronic engineering and engineering from Seoul National University, Korea, in 2005. He is currently working toward Ph.D. degree in computer science from Korea Advanced Institute of Science and Technology, Korea. His main researches include the system security, especially intrusion tolerant system based on adaptive cluster transformation and historical data. Dongyoung KooDongyoung Koo received the B.S. degree in computer science from Yonsei University in 2009, and the M.S. degree in computer science from KAIST in 2012. His research interests include information security, secure cloud computing, and cryptography.

Optimal Cluster Expansion-Based Intrusion Tolerant System to Prevent Denial of Service Attacks

“…The goal of ITS is to provide reliability and survivability by maintaining quality of service even while under attack [3]. When designing an ITS, the fundamental principles are redundancy, diversity, and recovery [4,5]. Redundancy refers to the duplication of elements or services in a system.…”

Design of Intrusion Tolerance System based on Service Redundancy Level

“…To achieve the goal of ITS, in general, redundancy and diversity are the two fundamental principles in designing ITS [6] [7]. Redundancy refers to the duplication of elements or services in a system.…”

Securing unmanned autonomous systems from cyber threats

“…In the past few years, several intrusion tolerant cyber-system architectures have been proposed. A survey of these architectures is available in Heo et al 74 and three of these architectures, namely SITAR, 75 , MAFTIA 76 and SCIT, 77 have been compared by Nguyen and Sood. 78 A quantitative security model developed by Madan et al 79 has shown that the security performance in terms of the probability of arriving into security failed states and Mean-Time-To-Security-Failure (MTTSF) to reach these states is improved in intrusion tolerant architectures.…”