Resilient intrusion tolerance through proactive and reactive recovery

Paulo Sousa, Alysson Neves Bessani, Miguel Correia, Nuno Ferreira Neves, Paulo Verissimo

Research output: Chapter in Book/Report/Conference proceedingConference contribution

43 Scopus citations

Abstract

Previous works have studied how to use proactive recovery to build intrusion-tolerant replicated systems that are resilient to any number of faults, as long as recoveries are faster than an upper-bound on fault production assumed at system deployment time. In this paper, we propose a complementary approach that combines proactive recovery with services that allow correct replicas to react and recover replicas that they detect or suspect to be compromised. One key feature of our proactive-reactive recovery approach is that, despite recoveries, it guarantees the availability of the minimum amount of system replicas necessary to sustain system's correct operation. We design a proactive-reactive recovery service based on a hybrid distributed system model and show, as a case study, how this service can effectively be used to augment the resilience of an intrusion-tolerant firewall adequate for the protection of critical infrastructures. © 2007 IEEE.
Original languageEnglish (US)
Title of host publicationProceedings - 13th Pacific Rim International Symposium on Dependable Computing, PRDC 2007
PublisherAbrasive Engineering Society
Pages373-380
Number of pages8
ISBN (Print)0769530540
DOIs
StatePublished - Jan 1 2007
Externally publishedYes

Fingerprint Dive into the research topics of 'Resilient intrusion tolerance through proactive and reactive recovery'. Together they form a unique fingerprint.

Cite this