Title :
Proactive Resilience Revisited: The Delicate Balance Between Resisting Intrusions and Remaining Available
Author :
Sousa, Paulo ; Neves, Nuno Ferreira ; Veríssimo, Paulo ; Sanders, William H.
Author_Institution :
Lisboa Univ.
Abstract :
In a recent paper, we presented proactive resilience as a new approach to proactive recovery, based on architectural hybridization. We showed that, with appropriate assumptions about fault rate, proactive resilience makes it possible to build distributed intrusion-tolerant systems guaranteed not to suffer more than the assumed number of faults during their lifetime. In this paper, we explore the impact of these assumptions in asynchronous systems, and derive conditions that should be met by practical systems in order to guarantee long-lived, i.e., available, intrusion-tolerant operation. Our conclusions are based on analytical and simulation results as implemented in Mobius, and we use the same modeling environment to show that our approach offers higher resilience in comparison with other proactive intrusion-tolerant system models
Keywords :
distributed processing; security of data; system recovery; Mobius; architectural hybridization; asynchronous systems; distributed intrusion-tolerant systems; intrusion resilience; proactive recovery; proactive resilience; Analytical models; Computer crime; Electronic government; Informatics; Laboratories; Large-scale systems; Online services; Resilience; Resists; Web and internet services;
Conference_Titel :
Reliable Distributed Systems, 2006. SRDS '06. 25th IEEE Symposium on
Conference_Location :
Leeds
Print_ISBN :
0-7695-2677-2
DOI :
10.1109/SRDS.2006.37