An Independent Component Recovery Approach for Intrusion Tolerance

Abstract

An independent component recovery approach for intrusion tolerance is proposed in this paper. Virtual Machines (VMs) are used to provide each online replica with an independent backup replica. The recovery of each component depends on the actual service state. A strict execution order is not needed to create VMs, destroy VMs and synchronize state data. The approach improves the flexibility of components of the system. In addition, for preventing the state data from losing during the recovery of replicas, a set of virtual storages, which can be connected or disconnected with online servers quickly, are used for storing the state data. A fixed cycle is set for synchronizing the state data independently. A prototype is implemented in the OpenStack cloud platform. Experimental results show that the approach improves the continuity and security of the services.