An architecture for an adaptive intrusion-tolerant server

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2845, Issue , 2003, Pages 158-178

  Valdes, Alfonso ^a   Almgren, Magnus ^a   Cheung, Steven ^a   Deswarte, Yves ^a,b   Dutertre, Bruno ^a   Levy, Joshua ^a   Saïdi, Hassen ^a   Stavridou, Victoria ^a   Uribe, Tomás E ^a  

^a SRI INTERNATIONAL   (United States)

^b LAAS CNRS   (France)

Author keywords

[No Author keywords available]

Indexed keywords

NETWORK SECURITY;

ALERT MANAGEMENT; DYNAMIC CONFIGURATION; ENTERPRISE SYSTEM; GENERAL ARCHITECTURES; GRACEFUL DEGRADATION; INTRUSION TOLERANCE; INTRUSION TOLERANT; SYSTEM CONFIGURATIONS;

MERCURY (METAL);

EID: 35048865426     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: None     Document Type: Article

References (33)

1. M. Almgren and U. Lindqvist. Application-integrated data collection for security monitoring. In Recent Advances in Intrusion Detection (RAID 2001), volume 2212 of LNCS, pages 22-36. Springer-Verlag, Oct. 2001.
2. C. Cowan, C. Pu, D. Maier, J. Walpole, P. Bakke, S. Beattie, A. Grier, P. Wagle, Q. Zhang, and H. Hinton. StackGuard: Automatic adaptive detection and prevention of buffer-overflow attacks. In Proc. 7th USENIX Security Conference, pages 63-78, Jan. 1998.
3. M. Cukier, J. Lyons, P. Pandey, H. V. Ramasamy, W. H. Sanders, P. Pal, F. Webber, R. Schantz, J. Loyall, R. Watro, M. Atighetchi, and J. Gossett. Intrusion tolerance approaches in ITUA. In Fast Abstract Supplement of the 2001 Intl. Conf. on Dependable Systems and Networks, pages B-64, B-65, July 2001.
4. M. Cukier, J. Ren, C. Sabnis, D. Henke, J. Pistole, W. H. Sanders, D. E. Bakken, M. E. Berman, D. A. Karr, and R. Schantz. AQuA: an adaptive architecture that provides dependable distributed objects. In 17th IEEE Symposium on Reliable Distributed Systems (SDRS-17), pages 245-253. IEEE Computer Society Press, Oct. 1998.
5. D. Curry and H. Debar. Intrusion detection message exchange format: Data model and extensible markup language (XML) document type definition, Nov. 2001. Work in progress.
6. Y. Deswarte, L. Blain, and J.-C. Fabre. Intrusion tolerance in distributed computing systems. In Proc. Intl. Symposium on Security and Privacy, pages 110-121. IEEE press, May 1991.
7. J.-C. Fabre, Y. Deswarte, J.-C. Laprie, and D. Powell. Saturation: Reduced idleness for improved fault-tolerance. In 18th International Symposium on Fault-Tolerant Computing (FTCS-18), pages 200-205. IEEE Computer Society Press, 1988.
8. J.-C. Fabre and T. Pérennou. A metaobject architecture for fault-tolerant distributed systems: The FRIENDS approach. IEEE Transactions on Computers, 47:78-95, Jan. 1998.
9. O. Gonzalez, H. Shrikumar, J. Stankovic, and K. Ramamritham. Adaptive fault tolerance and graceful degradation under dynamic hard real-time scheduling. In 18th IEEE Real-Time Systems Symposium (RTSS '97). IEEE Computer Society Press, Dec. 1997.
10. G. J. Holzmann. Design and Validation of Computer Protocols. Prentice Hall, Engelwood Cliffs, NJ, 1991.
11. Y. Huang, C. Kintala, N. Kolettis, and N. Fulton. Software rejuvenation: Analysis, module and applications. In 25th Symposium on Fault Tolerant Computing, pages 381-390. IEEE Computer Society Press, June 1995.
12. Real Secure server sensor policy guide version 6.0, May 2001. http://www.iss.net.
13. J. E. Just and J. C. Reynolds. HACQIT (Hierarchical Adaptive Control of QoS for Intrusion Tolerance). In 17th Annual Computer Security Applications Conference, 2001.
14. U. Lindqvist and P. Porras. Detecting computer and network misuse through the production-based expert system toolset (P-BEST). In Proceedings of the 1999 IEEE Symposium on Security and Privacy, pages 146-161. IEEE press, May 1999.
15. th Annual Computer Security Applications Conference, Dec. 2001.
16. P. Liu and S. Jajodia. Multi-phase damage confinement in database systems for intrusion tolerance. In Proc. 14th IEEE Computer Security Foundations Workshop, pages 191-205, June 2001.
17. R. Permeh and M. Maiffret. .ida "Code Red" worm. Security Advisory AL20010717, eEye Digital Security, July 2001. http://www.eeye.com/html/ Research/Advisories/AL20010717.html.
18. P. Porras. Mission-based correlation. Personal communication, SRI International, 2001. http://www.sdl.sri.com/projects/M-correlation.
19. P. Porras and P. Neumann. EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances. In National Information Security Conference, Oct. 1997.
20. P. Porras and A. Valdes. Live traffic analysis of TCP/IP gateways. In Proc. Symposium on Network and Distributed System Security. Internet Society, Mar. 1998.
21. D. Powell, J. Arlat, L. Beus-Dukic, A. Bondavalli, P. Coppola, A. Fantechi, E. Jenn, C. Rabéjac, and A. Wellings. GUARDS: A generic upgradable architecture for real-time dependable systems. IEEE Transactions on Parallel and Distributed Systems, 10:580-599, June 1999.
22. D. Powell, G. Bonn, D. Seaton, P. Veríssimo, and F. Waeselynck. The Delta-4 approach to dependability in open distributed computing systems. In Proc. 18th Int. Symp. on Fault-Tolerant Computing Systems (FTCS-18), pages 246-251. IEEE Computer Society Press, June 1988.
23. G. R. Ranger, P. K. Khosla, M. Bakkaloglu, M. W. Bigrigg, G. R. Goodson, S. Oguz, V. Pandurangan, C. A. N. Soules, J. D. Strunk, and J. J. Wylie. Survivable storage systems. In DARPA Information Survivability Conference and Exposition II, pages 184-195. IEEE Computer Society, June 2001.
24. R. Rivest. The MD5 message digest algorithm. Internet Engineering Task Force, RFC 1321, Apr. 1992.
25. L. Rodrigues and P. Verissimo. xAMp: a multi-primitive group communications service. In 11th Symposium on Reliable Distributed Systems, pages 112-121, Oct. 1992.
26. M. Roesch. Snort: Lightweight intrusion detection for networks. In USENIX LISA'99, Nov. 1999. www.snort.org.
27. F. B. Schneider. Enforceable security policies. Information and System Security, 3(1):30-50, 2000.
28. Tripwire white papers, 2001. http://www.tripwire.com.
29. A. Valdes and K. Skinner. Adaptive, model-based monitoring for cyber attack detection. In Recent Advances in Intrusion Detection (RAID 2000), pages 80-92, Oct. 2000.
30. A. Valdes and K. Skinner. Probabilistic alert correlation. In Recent Advances in Intrusion Detection (RAID 2001), volume 2212 of LNCS, pages 54-68. Springer-Verlag, Oct. 2001.
31. G. Vigna, S. Eckmann, and R. Kemmerer. The STAT tool suite. In DISCEX 2000. IEEE press, Jan. 2000.
32. F. Wang, F. Gong, C. Sargor, K. Goseva-Popstojanova, K. Trivedi, and F. Jou. SITAR: a scalable intrusion tolerance architecture for distributed server. In Second IEEE SMC Information Assurance Workshop, 2001.
33. J. Wensley, L. Lamport, J. Goldberg, M. Green, K. Levitt, P. Melliar-Smith, R. Shostack, and C. Weinstock. SIFT: the design and analysis of a fault-tolerant computer for aircraft control. Proc. IEEE, 66:1240-1255, Oct. 1978.