Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems]最新文献

Architectures for intrusion tolerant database systems 入侵容忍数据库系统的体系结构

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2002-12-09 DOI: 10.1109/FITS.2003.1264924

Peng Liu

{"title":"Architectures for intrusion tolerant database systems","authors":"Peng Liu","doi":"10.1109/FITS.2003.1264924","DOIUrl":"https://doi.org/10.1109/FITS.2003.1264924","url":null,"abstract":"In this paper we propose four architectures for intrusion-tolerant database systems. While traditional secure database systems rely on prevention controls, an intrusion-tolerant database system can operate through attacks in such a way that the system can continue delivering essential services in the face of attacks. With a focus on attacks by malicious transactions, Architecture I can detect intrusions, and locate and repair the damage caused by the intrusions. Architecture II enhances Architecture I with the ability to isolate attacks so that the database can be immunized from the damage caused by a lot of attacks. Architecture III enhances Architecture I with the ability to dynamically contain the damage in such a way that no damage will leak out during the attack recovery process. Architecture IV enhances Architectures II and III with the ability to adapt the intrusion-tolerance controls to the changing environment so that a stabilized level of trustworthiness can be maintained. Architecture IV enhances Architecture IV with the ability to deliver differential, quantitative QoIA services to customers who have subscribed for these services even in the face of attacks.","PeriodicalId":149495,"journal":{"name":"Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems]","volume":"25 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2002-12-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"130371137","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 46

COCA: a secure distributed online certification authority COCA:一个安全的分布式在线证书颁发机构

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2002-11-01 DOI: 10.1145/571637.571638

Lidong Zhou, F. Schneider, R. V. Renesse

引用次数: 445

Linux security modules: general security support for the linux kernel Linux安全模块:对Linux内核的一般安全支持

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2002-08-05 DOI: 10.1109/FITS.2003.1264934

Chris Wright, Crispin Cowan, Stephen Dale Smalley, James Morris, Greg Kroah-Hartman

{"title":"Linux security modules: general security support for the linux kernel","authors":"Chris Wright, Crispin Cowan, Stephen Dale Smalley, James Morris, Greg Kroah-Hartman","doi":"10.1109/FITS.2003.1264934","DOIUrl":"https://doi.org/10.1109/FITS.2003.1264934","url":null,"abstract":"The access control mechanisms of existing mainstream operating systems are inadequate to provide strong system security. Enhanced access control mechanisms have failed to win acceptance into mainstream operating systems due in part to a lack of consensus within the security community on the right solution. Since general-purpose operating systems must satisfy a wide range of user requirements, any access control mechanism integrated into such a system must be capable of supporting many different access control models. The Linux Security Modules (LSM) project has developed a lightweight, general purpose, access control framework for the mainstream Linux kernel that enables many different access control models to be implemented as loadable kernel modules. A number of existing enhanced access control implementations, including Linux capabilities, Security-Enhanced Linux (SELinux), and Domain and Type Enforcement (DTE), have already been adapted to use the LSM framework. This paper presents the design and implementation of LSM and discusses the challenges in providing a truly general solution that minimally impacts the Linux kernel.","PeriodicalId":149495,"journal":{"name":"Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems]","volume":"19 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2002-08-05","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"132525445","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 533

Formal specification and verification of a group membership protocol for an intrusion-tolerant group communication system 容错群通信系统组成员协议的正式规范和验证

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2002-04-01 DOI: 10.1109/FITS.2003.1264937

H. Ramasamy, M. Cukier, W. Sanders

引用次数: 21

Type-preserving compilation of featherweight java 轻量级java的保类型编译

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2002-03-01 DOI: 10.1109/FITS.2003.1264927

C. League, Zhong Shao, Valery Trifonov

引用次数: 46

A type system for certi .ed binaries 用于认证的二进制文件的类型系统

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2002-01-16 DOI: 10.1145/503272.503293

Zhong Shao, Bratin Saha, Valery Trifonov, N. Papaspyrou

引用次数: 54

Untrusted hosts and confidentiality: secure program partitioning 不可信主机和机密性:安全程序分区

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2001-10-21 DOI: 10.1109/FITS.2003.1264931

S. Zdancewic, Lantian Zheng, Nathaniel Nystrom, A. Myers

引用次数: 124

Survival by defense-enabling 通过防御来生存

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2001-09-10 DOI: 10.1109/FITS.2003.1264938

P. Pal, F. Webber, R. Schantz

引用次数: 21

Design and evaluation of a wide-area event notification service 广域事件通知服务的设计和评估

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2001-08-01 DOI: 10.1109/FITS.2003.1264940

Antonio Carzaniga, David S. Rosenblum, A. Wolf

{"title":"Design and evaluation of a wide-area event notification service","authors":"Antonio Carzaniga, David S. Rosenblum, A. Wolf","doi":"10.1109/FITS.2003.1264940","DOIUrl":"https://doi.org/10.1109/FITS.2003.1264940","url":null,"abstract":"The components of a loosely coupled system are typically designed to operate by generating and responding to asynchronous events. An event notification service is an application-independent infrastructure that supports the construction of event-based systems, whereby generators of events publish event notifications to the infrastructure and consumers of events subscribe with the infrastructure to receive relevant notifications. The two primary services that should be provided to components by the infrastructure are notification selection (i. e., determining which notifications match which subscriptions) and notification delivery (i.e., routing matching notifications from publishers to subscribers). Numerous event notification services have been developed for local-area networks, generally based on a centralized server to select and deliver event notifications. Therefore, they suffer from an inherent inability to scale to wide-area networks, such as the Internet, where the number and physical distribution of the service's clients can quickly overwhelm a centralized solution. The critical challenge in the setting of a wide-area network is to maximize the expressiveness in the selection mechanism without sacrificing scalability in the delivery mechanism. This paper presents SIENA, an event notification service that we have designed and implemented to exhibit both expressiveness and scalability. We describe the service's interface to applications, the algorithms used by networks of servers to select and deliver event notifications, and the strategies used to optimize performance. We also present results of simulation studies that examine the scalability and performance of the service.","PeriodicalId":149495,"journal":{"name":"Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems]","volume":"29 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2001-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"123115110","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1710

Self-securing storage: protecting data in compromised systems 自安全存储:保护受损系统中的数据

Foundations of Intrusion Tolerant Systems, 2003 [Organically Assured and Survivable Information Systems] Pub Date : 2000-10-22 DOI: 10.1109/FITS.2003.1264933

J. Strunk, G. Goodson, Michael L. Scheinholtz, Craig A. N. Soules, G. Ganger

引用次数: 262