Survivability through customization and adaptability: The Cactus approach

Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2000

Volumn 1, Issue , 2000, Pages 294-307

  Hiltunen, M A ^a   Schlichting, R D ^a   Ugarte, C A ^a   Wong, G T ^a  

^a University of Arizona   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

FAULT TOLERANCE; FAULT TOLERANT COMPUTER SYSTEMS; INTRUSION DETECTION; NETWORK SECURITY;

CRYPTOGRAPHIC METHODS; DYNAMIC ADAPTATIONS; ENABLING TECHNOLOGIES; INTENTIONAL ATTACKS; NETWORKED SYSTEMS; NEW APPROACHES; SOFTWARE DIVERSITY; SURVIVABLE SERVICES;

SOFTWARE RELIABILITY;

EID: 84961725667     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/DISCEX.2000.825033     Document Type: Conference Paper

References (62)

1. E. Anderson and D. Patterson. Extensible, scalable monitoring for clusters of computers. In Proceedings of Eleventh Systems Administration Conference (LISA '97), pages 9-16, San Diego, CA, Oct 1997.
2. R. Balzer. Instrumented connectors for mediating architecture interactions. DARPA Windows NT Workshop, Seattle, WA. http://www.dyncorp-is.com/darpa/meetings/win98aug/Balzerinstruments.html, Aug 1998.
3. M. Barbacci. Survivability in the age of vulnerable systems. IEEE Computer, 29(11):8, Nov 1996.
4. D. Batory, J. Barnett, J. Garza, K. Smith, K. Tsukuda, B. Twichell, and T. Wise. GENESIS: An extensible database management system. IEEE Transactions on Software Engineering, SE-14(11):1711-1729, Nov 1988.
5. P. Bell and K. Jabbour. Review of point-to-point network routing algorithms. IEEE Communications Magazine, 24(1):34-38, 1986.
6. B. Bershad, S. Savage, P. Pardyak, E. Sirer, M. Fiuczynski, D. Becker, C. Chambers, and S. Eggers. Extensibility, safety, and performance in the SPIN operating system. In Proceedings of the 15th ACM Symposium on Operating Systems Principles, pages 267-284, Copper Mountain Resort, CO, Dec 1995.
7. B. Bhargava, K. Friesen, A. Helal, and J. Riedl. Adaptability experiments in the RAID distributed database system. In Proceedings of the 9th Symposium on Reliable Distributed Systems, pages 76-85, 1990.
8. N. Bhatti, M. Hiltunen, R. Schlichting, and W. Chiu. Coyote: A system for constructing fine-grain configurable communication services. ACM Transactions on Computer Systems, 16(4):321-366, Nov 1998.
9. P. Brutch, T. Brutch, and U. Pooch. Electronic quarantine: An automated intruder response tool. In Proceedings of the Information Survivability Workshop 1998, pages 23-27, Orlando, FL, Oct 1998.
10. I. Chang, M. Hiltunen, and R. Schlichting. Affordable fault tolerance through adaptation. In J. Rolin, editor, Parallel and Distributed Processing, Lecture Notes in Computer Science1388, pages 585-603. Springer, Apr 1998.
11. W.-K. Chen, M. Hiltunen, and R. Schlichting. Software architecture for building adaptive software. Technical report, Department of Computer Science, University of Arizona, Tucson, AZ, 1999. In preparation.
12. M. Choi and C. Krishna. An adaptive algorithm to ensure differential service in a token-ring network. IEEE Transactions on Computers, C-39(1):19-33, 1990.
13. C. Cowan and C. Pu. Immunix: Survivability through specialization. In Proceedings of the 1997 Information Survivability Workshop, Feb 1997.
14. C. Cowan and C. Pu. Survivability from a Sow's ear: The retrofit security requirement. In Proceedings of the Information Survivability Workshop 1998, pages 43-47, Orlando, FL, Oct 1998.
15. H. Debar, M. Becker, and D. Siboni. A neural network component for an intrusion detection system. In Proceedings of the IEEE Symposium on Research in Security and Privacy, pages 1-11, Oakland, CA, 1992.
16. D. Denning. An intrusion-detection model. IEEE Transactions on Software Engineering, SE-13(2):222-232, Feb 1987.
17. Y. Deswarte, J.-C. Fabre, J.-M. Fray, D. Powell, and P.-G. Ranea. Saturne: A distributed computing system which tolerates faults and intrusions. In Proceedings of the Workshop on Future Trends of Distributed Computing Systems, pages 329-338, Hong Kong, Sep 1990.
18. T. Dierks and C. Allen. The TLS protocol, version 1.0. Request for Comments (Standards Track) RFC 2246, Certicom, Jan 1999.
19. R. Ellison, D. Fisher, R. Linger, H. Lipson, T. Longstaff, and N. Mead. Survivable network systems: An emerging discipline. Technical Report CMU/SEI-97-TR-013, Nov 1997.
20. D. Engler, M. Kaashoek, and J. O'Toole. Exokernel: An operating system architecture for application-level resource management. In Proceedings of the 15th ACM Symposium on Operating Systems Principles, pages 251-266, Copper Mountain Resort, CO, Dec 1995.
21. M. Esmaili, R. Safavi-Naini, and J. Pieprzyk. Computer intrusion detection: A comparative survey. Technical Report Ref. 95-07, Center for Computer Security Research, University of Wollongong, Australia, May 1995.
22. J.-C. Fabre, Y. Deswarte, and B. Randell. Designing secure and reliable applications using fragmentation-redundancy-scattering:an object-oriented approach. In Proceedings of the 1st European Dependable Computing Conference, pages 21-38, Berlin, Germany, Oct 1994.
23. R. A. Finkel. Pulsar: An extensible tool for monitoring large Unix sites. Software Practice and Experience, 27(10):1163-1176, 1997.
24. A. Fox, S. Gribble, E. Brewer, and E. Amir. Adapting to network and client variation via on-demand, dynamic distillation. In Proceedings of the 7th ASPLOS Conference, Oct 1996.
25. A. Freier, P. Karlton, and P. Kocher. The SSL protocol, version 3.0. Internet-draft, Netscape Communications, Nov 1996.
26. T. Garvey and T. Lunt. Model-based intrusion detection. In Proceedings of the 14th National Computer Security Conference, Washington, DC, Oct 1991.
27. M. Hayden. The Ensemble system. Technical Report TR98-1662, Department of Computer Science, Cornell University, Jan 1998.
28. L. Heberlein, K. Levitt, and B. Mukherjee. A method to detect intrusion activity in a networked environment. In Proceedings of the 14th National Computer Security Conference, pages 362-371, 1991.
29. M. Hiltunen. Configuration management for highly-customizable software. IEE Proceedings: Software, 145(5):180-188, Oct 1998.
30. M. Hiltunen, V. Immanuel, and R. Schlichting. Supporting customized failure models for distributed software. Distributed Systems Engineering, 1999. To appear.
31. M. Hiltunen, S. Jaiprakash, and R. Schlichting. Exploiting fine-grain configurability for secure communication. Technical Report 99-08, Department of Computer Science, University of Arizona, Tucson, AZ, Apr 1999.
32. M. Hiltunen and R. Schlichting. Adaptive distributed and fault-tolerant systems. Computer Systems Science and Engineering, 11(5):125-133, Sep 1996.
33. M. Hiltunen and R. Schlichting. A configurable membership service. IEEE Transactions on Computers, 47(5):573-586, May 1998.
34. M. Hiltunen, R. Schlichting, X. Han, M. Cardozo, and R. Das. Real-time dependable channels: Customizing QoS attributes for distributed systems. IEEE Transactions on Parallel and Distributed Systems, 10(6):600-612, Jun 1999.
35. N. Hutchinson and L. Peterson. The x-kernel: An architecture for implementing network protocols. IEEE Transactions on Software Engineering, 17(1):64-76, Jan 1991.
36. V. Jacobson. Congestion avoidance and control. In Proceedings of the SIGCOMM '88 Symposium, pages 314-332, Aug 1988.
37. S. Kent and R. Atkinson. Security architecture for the internet protocol. Request for Comments (Standards Track) RFC 2401, BBN Corp, Home Network, Nov 1998.
38. H. Kiliccote and P. Khosla. Borg: A scalable and secure distributed information system. In Proceedings of the Information Survivability Workshop 1998, pages 101-105, Orlando, FL, Oct 1998.
39. P. Krupp, J. Maurer, and B. Thuraisingham. Survivability issues for evolvable real-time command and control systems. In Proceedings of the 1997 Information Survivability Workshop, Feb 1997.
40. S. Kumar and E. Spafford. A pattern matching model for misuse intrusion detection. In Proceedings of the 17th National Computer Security Conference, pages 11-21, Oct 1994.
41. L. Lamport, R. Shostak, and P. M. The Byzantine generals problem. ACM Transactions on Programming Languages and Systems, 4(3):382-401, Jul 1982.
42. J. Linn. Privacy enhancement for internet electronic mail: Part I: Message encryption and authentication procedures. Request for Comments RFC 1421, Feb 1993.
43. T. Lunt, R. Jagannathan, D. Anderson, C. Dodd, F. Gilham, C. Jalali, H. Javitz, P. Neuman, A. Tamaru, and A. Valdez. System design document: Next-generation intrusion detection expert system (NIDES). Technical report, SRI International, Mar 1993.
44. T. Miller, C. Stirlen, and E. Nemeth. satool - A system administrator's cockpit, an implementation. In Proceedings of Seventh Systems Administration Conference (LISA '93), pages 119-129, Monterey, CA, Nov 1993.
45. A. Montz, D. Mosberger, S. O'Malley, L. Peterson, T. Proebsting, and J. Hartman. Scout: a communications-oriented operating system. In Proceedings of the 1st Symposiumon Operating Design and Implementation (OSDI), page 200, Nov 1994.
46. P. Neumann and P. Porras. Experience with EMERALD to date. In Proceedings of the 1st USENIX Workshop on Intrusion Detection and Network Monitoring, Santa Clara, CA, Apr 1999.
47. H. Orman, S. O'Malley, R. Schroeppel, and D. Schwartz. Paving the road to network security or the value of small cobblestones. Technical Report 94-16, Department of Computer Science, University of Arizona, Tucson, AZ, May 1994.
48. D. Powell. Failure mode assumptions and assumption coverage. In Proceedings of the 22nd IEEE Symposium on Fault-Tolerant Computing, pages 386-395, 1992.
49. M. Puldy and M. Christensen. Lessons learned in the implementation of a multi-location network based real-time intrusion detection system. In Proceedings of the 1st International Workshop on the Recent Advances on Intrusion Detection, Louvain-la-Neuve, Belgium, Sep 1998.
50. R. v. Renesse, K. Birman, M. Hayden, A. Vaysburd, and D. Karr. Building adaptive systems using Ensemble. Software Practice and Experience, 28(9):963-979, Jul 1998.
51. R. v. Renesse, K. Birman, and S. Maffeis. Horus, a flexible group communication system. Communications of the ACM, 39(4):76-83, Apr 1996.
52. E. Rescorla and A. Schiffman. The secure hypertext transfer protocol. Internet-draft, Terisa Systems, Inc., Jun 1998.
53. L. Ricciulli, S. De Capatini di Vimercati, P. Lincoln, and P. Samarati. PNNI global routing infrastructure protection. In Proceedings of the Information Survivability Workshop 1998, pages 123-126, Orlando, FL, Oct 1998.
54. O. Rodeh, K. Birman, M. Hayden, Z. Xiao, and D. Dolev. The architecture and performance of security protocols in the Ensemble group communication system. Technical Report TR98-1703, Department of Computer Science, Cornell University, Dec 1998.
55. N. Sammons. Multi-platform interrogation and reporting with rscan. In Proceedings of Ninth Systems Administration Conference (LISA '95), Monterey, CA, Sep 1995.
56. D. Schmidt, D. Box, and T. Suda. ADAPTIVE: A dynamically assembled protocol transformation, integration, and evaluation environment. Concurrency: Practice and Experience, 5(4):269-286, Jun 1993.
57. S. Staniford-Chen, B. Tung, and D. Schnackenberg. The common intrusion detection framework (CIDF). In Proceedings of the Information Survivability Workshop 1998, pages 139-143, Orlando, FL, Oct 1998.
58. R. Thomas and R. Feiertag. Addressing survivability in the composable replaceable security services infrastructure. In Proceedings of the Information Survivability Workshop1998, pages 159-162, Orlando, FL, Oct 1998.
59. F. Travostino, E. Menze, and F. Reynolds. Paths: Programming with system resources in support of real-time distributed applications. In Proceedings of the IEEE Workshop on Object-Oriented Real-Time Dependable Systems, Feb 1996.
60. W. Venema. TCP WRAPPER: Network monitoring, access control, and booby traps. In Proceedings of the 3rd Usenix UNIX Security Symposium, pages 85-92, Baltimore,MD, Sep 1992.
61. J. Voas, G. McGraw, and A. Ghosh. Reducing uncertainty about survivability. In Proceedings of the 1997 Information Survivability Workshop, Feb 1997.
62. A. Wespi, M. Dacier, H. Debar, and M. Nassehi. Audit trail pattern analysis for detecting suspicious process behavior. In Proceedings of the 1st International Workshop on the Recent Advances on Intrusion Detection, Louvain-la-Neuve, Belgium, Sep 1998.