Developing a heterogeneous intrusion tolerant CORBA system

Foundations of Intrusion Tolerant Systems, OASIS 2003

Volumn , Issue , 2003, Pages 387-396

  Sames, David ^a   Matt, Brian ^a   Niebuhr, Brian ^a   Tally, Gregg ^a   Whitmore, Brent ^a   Bakken, David ^b  

^a NAI Labs   (United States)

^b Washington State University   (United States)

Author keywords

Computer architecture; Computer science; Computer security; Cryptography; Fault tolerance; Information systems; Middleware; Multicast protocols; Open source software; Voting

Indexed keywords

COMMON OBJECT REQUEST BROKER ARCHITECTURE (CORBA); COMPUTER ARCHITECTURE; COMPUTER SCIENCE; CRYPTOGRAPHY; FAULT TOLERANCE; INFORMATION SYSTEMS; MERCURY (METAL); MIDDLEWARE; MULTICASTING; NETWORK ARCHITECTURE; OPEN SOURCE SOFTWARE; SECURITY OF DATA; SOFTWARE ENGINEERING;

CLIENT SERVER COMMUNICATIONS; DISTRIBUTED OBJECT SYSTEM; INTRUSION TOLERANCE; INTRUSION TOLERANT SYSTEM; MULTICAST PROTOCOL; PSEUDO-RANDOM FUNCTIONS; SYMMETRIC ENCRYPTION; VOTING;

OPEN SYSTEMS;

EID: 84946225120     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/FITS.2003.1264945     Document Type: Conference Paper

References (42)

1. Bakken, David. "Middleware." Chapter in Encyclopedia of Distributed Computing, J. Urban and P. Dasgupta, eds., Kluwer Academic Publishers, 2001, to appear.
2. K. Birman, "Virtual synchrony model", in Reliable Distributed Computing with the Isis toolkit, IEEE CS Press, 1994.
3. Bakken, Zhan, Jones, Kann, "Middleware Support for Voting and Data Fusion" in Proceedings of the International Conference on Dependable Systems and Networks, IEEE/IFIP, Göteborg, Sweden, July 1-4, 2001, 453-462.
4. G. Bracha and S. Toueg. Asynchronous Consensus and Broadcast Protocols. Journal of the ACM, 32(4), 1995.
5. C. Cachin, K. Kursawe, and V. Shoup. Random oracles in Constantinople: Practical asynchronous Byzantine agreement using cryptography. In Proceedings, 19th ACM Symposium on Principles of Distributed Computing (PODC 2000), pages 123-132, July 2000.
6. M. Castro and B. Liskov. Proactive Recovery in a Byzantine-Fault-Tolerant System. In Proceedings of the 4th USENIX Symposium on Operating Systems Design and Implementation, October 2000.
7. M. Castro and B. Liskov. Practical Byzantine fault tolerance. In Proceedings of the 3rd USENIX Symposium on Operating Systems Design and Implementation, February 1999.
8. M. Castro and B. Liskov. Authenticated Byzantine Fault Tolerance Without Public-Key Cryptography. Technical Memo MIT/LCS/TM-589, MIT Laboratory for Computer Science, 1999.
9. M. Castro and B. Liskov. A Correctness Proof for a Practical Byzantine-Fault-Tolerant Replication Algorithm. Technical Memo MIT/LCS/TM-590, MIT Laboratory for Computer Science, 1999.
10. M. Chereque, D. Powell, P. Reynier, J. Richier, and J. Voiron. "Active Replication in Delta-4", in Proceedings of the Twenty Second International Symposium on Fault-Tolerant Computing , IEEE, Boston, Mass., July 1992, 28-37.
11. M. Cukier, J. Ren, C. Sabnis, W. H. Sanders, D. E. Bakken, M. E. Berman, D. A. Karr and R. E. Schantz, "AQuA: An adaptive architecture that provides dependable distributed objects," Proceedings of the IEEE 17th Symposium on Reliable Distributed Systems, West Lafayette, IN (October 1998), pp. 245-253.
12. "Data encryption standard", Federal Information Processing Standards Publication 46-3, U.S. Department of Commerce/National Bureau of Standards, National Technical Information Service, Springfield, Virginia, October, 1999.
13. W. Fenner. RFC 2236: Internet Group Management Protocol, version 2. IETF, November 1997.
14. http://www.pgp.com/research/nailabs/distributed-systems/intrusion-tolerant.asp.
15. K. Kihlstrom, L. Moser and P. Melliar-Smith, "The SecureRing Protocols for Securing Group Communication," Proceedings of the IEEE 31st Hawaii International Conference on System Sciences, Kona, Hawaii (January 1998), vol. 3, pp. 317-326.
16. S. Landis and S. Maffeis, "Building reliable distributed systems with CORBA," Theory and Practice of Object Systems, vol. 3, no. 1 (April 1997), pp. 31-43.
17. Lamport, Shostak, and Pease, "The Byzantine Generals Problem", ACM Transactions on Programming Languages and Systems, Vol. 4, No. 3, July 1982, Pages 382-401.
18. L. Moser, Y. Amir, P. Melliar-Smith, and D. Agarwal, "Extended virtual synchrony," In Proceedings of the 14th IEEE International Conference on Distributed Computing Systems (Poznan, Poland) June 1994, pp. 56-65.
19. L. E. Moser, P. M. Melliar-Smith, R. R. Koch and K. Berket, "A group communication protocol for CORBA," Proceedings of the 1999 ICPP International Workshop on Group Communication, Aizu, Japan (September 1999), pp. 30-36.
20. L. Moser, P. Melliar-Smith, P. Narasimhan, L. Tewksbury, and V. Kalogeraki, Eternal: Fault Tolerance and Live Upgrades for Distributed Object Systems, DARPA Information Survivability Conference & Exposition Volume II, 25-27 January, 2000, Hilton Head, South Carolina.
21. L. Moser, P. Melliar-Smith and N. Narasimhan, "The SecureGroup Communication System", Proceedings of the IEEE Information Survivability Conference, Hilton Head, SC (January 2000).
22. L.E. Moser, P.M. Melliar-Smith, P. Narasimhan, V. Kalogeraki, and L. Tewksbury, "The Eternal System", Workshop on Compositional Software Architectures, Monterey, California, January 6-8, 1998.
23. D. Malkhi, M. Merritt, O. Rodeh, Secure reliable multicast protocols in a WAN. Proceedings of the IEEE 17th International Conference on Distributed Computing Systems, 1997, pp. 94-97.
24. D. Malkhi and M. Reiter, "A high-throughput secure reliable multicast protocol, " Journal of Computer Security, IOS Press, 1997. Earlier version of this paper appeared in Proceedings of the 9th Computer Security Foundations Workshop, Kenmore, Ireland (June 1996), pp. 9-17.
25. D. Malkhi and M. Reiter. A high-throughput secure reliable multicast protocol. The Journal of Computer Security, 5, 1997, pp 113-127.
26. P. Narasimhan, K. P. Kihlstrom, L. E. Moser, and P. M. Melliar-Smith, "Providing support for survivable CORBA applications with the Immune system," in Proceedings of the 19th IEEE International Conference on Distributed Computing Systems, (Austin, TX), pp.507-516, May 1999.
27. M. Naor, B. Pinkas and O. Reingold, "Distributed Pseudo-random Functions and KDCs", Advances in Cryptology - EUROCRYPT '99 (LNCS 1592), 327-346, 1999.
28. C. O'Ryan, F. Kuhns, D. Schmidt, O. Othman, and J. Parsons, The Design and Performance of a Pluggable Protocols Framework for Real-time Distributed Object Computing Middleware, in Proceedings of theIFIP/ACM Middleware 2000 Conference, Pallisades, New York, April 3-7, 2000.
29. OMG. General Inter-ORB Protocol. OMG specification CORBA V2.3, 15:1-62, June 1999.
30. OMG. The Common Object Request Broker: Architecture and specification. Revision 2.5, 2001.
31. OMG. The CORBA Security Service. Draft Adopted Revision 1.8, 2001.
32. B. Parhami, "Optimal Algorithms for Exact, Inexact, and Approval Voting," Digest of the 22nd International Symposium on Fault-Tolerant Computing, pp. 404-411.
33. Parameswaran, R., Blough, D., and Bakken, D. "A Preliminary Investigation of Precision vs. Fault Tolerance Trade-offs in Voting Algorithms", in Digest of FastAbstracts presented at the International Conference on Dependable Systems and Networks (DSN-2001), Göteborg, Sweden, July, 2001.
34. Rivest, Shamir, Adleman. A Method for Obtaining Digital Signatures and Public-Key Cryptosystems. Communications of the ACM, 21(2), 1978.
35. Rivest. The MD5 Message-Digest Algorithm. Internet RFC-1321, 1992.
36. M. K. Reiter. Secure agreement protocols: Reliable and atomic group multicast in Rampart. In Proceedings of the 2nd ACM Conference on Computer and Communication Security, pages 68-80, November 1994.
37. M. Reiter. The Rampart toolkit for building high-integrity services. In Theory and Practice in Distributed Systems (Lecture Notes in Computer Science 938), pages 99-110, Springer-Verlag, 1995.
38. F. Schneider, Implementing fault-tolerant services using the state machine approach: a tutorial, ACM Computer Surveys, 22,4 (Dec. 1990), Pages 299-319.
39. D. Schmidt, A. Gokhale, T. Harrison, and G. Parulkar. "A High-performance Endsystem Architecture for Real-timeCORBA", IEEE Communications Magazine, February, 1997.
40. V. Shoup, "Practical threshold signatures", Advances in Cryptology - EUROCRYPT '2000, 2000.
41. Rodrigo Rodrigues, Miguel Castro, and Barbara Liskov, "BASE: Using Abstraction to Improve Fault Tolerance", Proceedings of the 18th Symposium on Operating Systems Principles (SOSP '01), Banff, Canada, October 2001.
42. Pal P, Webber F, Schantz RE, and Loyall JP. Intrusion Tolerant Systems. Proceedings of the IEEE Information Survivability Workshop (ISW-2000), 24-26 October 2000, Boston, Massachusetts.