loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2004 International Conference on Dependable Systems and Networks (DSN'04)
A Qualitative Analysis of the Intrusion-Tolerance Capabilities of the MAFTIA Architecture
Florence, Italy
June 28-July 01
ISBN: 0-7695-2052-9
Robert Stroud, University of Newcastle upon Tyne, UK
Ian Welch, Victoria University of Wellington, New Zealand
John Warne, University of Newcastle upon Tyne, UK
Peter Ryan, University of Newcastle upon Tyne, UK
MAFTIA was a three-year European research project that explored the use of fault-tolerance techniques to build intrusion-tolerant systems. The MAFTIA architecture embodies a number of key design principles for building intrusion-tolerant systems, such as the notion of distributing trust throughout the system and limiting the extent to which individual components are trusted, and the aim of this paper is to illustrate these principles and demonstrate MAFTIA's intrusion-tolerance capabilities by showing how MAFTIA mechanisms and protocols might be deployed in a realistic context. We discuss the relationship between intrusion tolerance and fault tolerance, and then describe how the MAFTIA architecture could be used to build an intrusion-tolerant version of a hypothetical e-commerce application. Using fault trees, we analyse possible attack scenarios and show how MAFTIA mechanisms protect against them. We conclude the paper with a discussion of related work and identify areas for future research.
Citation:
Robert Stroud, Ian Welch, John Warne, Peter Ryan, "A Qualitative Analysis of the Intrusion-Tolerance Capabilities of the MAFTIA Architecture," dsn, pp.453, 2004 International Conference on Dependable Systems and Networks (DSN'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.