Adaptive cyberdefense for survival and intrusion tolerance

Atighetchi, Michael; Pal, Partha; Webber, Franklin; Schantz, Richard; Jones, C.; Loyall, Joseph

doi:10.1109/mic.2004.54

Cited by 32 publications

(14 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The ultimate goal of this work is to reduce the number of alarms to be notified to users. Atighetchi et al [7] target intrusion tolerance through strategies such as replicating key application components, attack containment and unpredictable change of configurations. Weise [8] listed several goals for adaptive security, including reducing remediation time, decreasing attack velocity and shrinking the attack surface.…”

Section: Related Workmentioning

confidence: 99%

On the role of primary and secondary assets in adaptive security: An application in smart grids

Pasquale

Salehie

Ali

et al. 2012

2012 7th International Symposium on Software Engineering for Adaptive and Self-Managing Systems (SEAMS)

View full text Add to dashboard Cite

Abstract-Adaptive security aims to protect valuable assets managed by a system, by applying a varying set of security controls. Engineering adaptive security is not an easy task. A set of effective security countermeasures should be identified. These countermeasures should not only be applied to (primary) assets that customers desire to protect, but also to other (secondary) assets that can be exploited by attackers to harm the primary assets. Another challenge arises when assets vary dynamically at runtime. To accommodate these variabilities, it is necessary to monitor changes in assets, and apply the most appropriate countermeasures at runtime. The paper provides three main contributions for engineering adaptive security. First, it proposes a modeling notation to represent primary and secondary assets, along with their variability. Second, it describes how to use the extended models in engineering security requirements and designing required monitoring functions. Third, the paper illustrates our approach through a set of adaptive security scenarios in the customer domain of a smart grid. We suggest that modeling secondary assets aids the deployment of countermeasures, and, in combination with a representation of assets variability, facilitates the design of monitoring functions.

show abstract

Section: Related Workmentioning

confidence: 99%

On the role of primary and secondary assets in adaptive security: An application in smart grids

Pasquale

Salehie

Ali

et al. 2012

2012 7th International Symposium on Software Engineering for Adaptive and Self-Managing Systems (SEAMS)

View full text Add to dashboard Cite

show abstract

“…VI. RELATED WORK The concept of intrusion tolerance has been explored in [9,10,11,12,13]. Our assumption that undetected intrusions are inevitable and must be treated as an inherent problem of clusters is similar to that of Recovery Oriented Computing, which considers software and human errors as the norm and handles them by isolation and redundancy [14].…”

Section: Performance Studiesmentioning

confidence: 99%

Closing cluster attack windows through server redundancy and rotations

Huang

Arsenault

Sood

2006

Sixth IEEE International Symposium on Cluster Computing and the Grid (CCGRID'06)

View full text Add to dashboard Cite

It is well-understood that increasing redundancy in a system generally improves the availability and dependability of the system. In server clusters, one important form of redundancy is spare servers. Cluster security, while universally recognized as an important subject in its own right, has not often been associated with the issue of redundancy.In prior work, we developed a Self-Cleansing Intrusion Tolerance (SCIT) architecture that strengthens cluster security through periodic server rotations and self-cleansing. In this work, 1 we consider the servers in the cleansing mode as redundant, spare hardware and develop a unified control algorithm that manages the requirements of both security and service availability. We will show the advantages of our algorithm in the following areas: (1) Intrusion tolerance through constant server rotations and cleansing, (2) Survivability in events of server failures, (3) Guarantee of service availability as long as the cluster has a minimum number of functioning servers, and (4) Scalability, the support of using high degrees of hardware/server redundancy to improve security and fault tolerance. We provide proofs for important properties of the proposed algorithm. The effects of varying degrees of server redundancy in reducing attack windows are investigated through simulation.

show abstract

“…In particular, intrusion tolerance has been a good approach to achieve the practical goal of cyber-defense that has to provide services even if crucial parts of the systems are taken by attackers [3].…”

Section: Introductionmentioning

confidence: 99%

Hybrid Recovery-Based Intrusion Tolerant System for Practical Cyber-Defense

Jang

Doo

Lee

et al. 2016

IEICE Trans. Inf. & Syst.

View full text Add to dashboard Cite

SUMMARYDue to the periodic recovery of virtual machines regardless of whether malicious intrusions exist, proactive recovery-based Intrusion Tolerant Systems (ITSs) are being considered for mission-critical applications. However, the virtual replicas can easily be exposed to attacks during their working period, and additionally, proactive recoverybased ITSs are ineffective in eliminating the vulnerability of exposure time, which is closely related to service availability. To address these problems, we propose a novel hybrid recovery-based ITS in this paper. The proposed method utilizes availability-driven recovery and dynamic cluster resizing. The availability-driven recovery method operates the recovery process by both proactive and reactive ways for the system to gain shorter exposure times and higher success rates. The dynamic cluster resizing method reduces the overhead of the system that occurs from dynamic workload fluctuations. The performance of the proposed ITS with various synthetic and real workloads using CloudSim showed that it guarantees higher availability and reliability of the system, even under malicious intrusions such as DDoS attacks. key words: intrusion tolerant system (ITS), hybrid recovery, availabilitydriven recovery, dynamic cluster resizing, mission-critical application

show abstract

Adaptive cyberdefense for survival and intrusion tolerance

Cited by 32 publications

References 7 publications

On the role of primary and secondary assets in adaptive security: An application in smart grids

On the role of primary and secondary assets in adaptive security: An application in smart grids

Closing cluster attack windows through server redundancy and rotations

Hybrid Recovery-Based Intrusion Tolerant System for Practical Cyber-Defense

Contact Info

Product

Resources

About