Analysis of a Virtualization-based Recovery Approach for Intrusion Tolerance Systems

Recovery is a promising approach for building intrusion tolerant systems that remove or minimize the effects of malicious attacks. In this paper, a Virtualization-based Recovery approach for Intrusion Tolerance systems (VRIT) is proposed. We present the architecture of the VRIT, construct the state transition model of the VRIT, and analyze quantitatively the security of the VRIT system. We characterize the intrusion tolerance provided by the system through several measures defined on the model. Finally we have some simulation experiments to evaluate both the availability and the mean time to security failure for the VRIT system.