2006 IEEE International Performance Computing and Communications Conference (2006)
Phoenix, AZ, USA
Apr. 10, 2006 to Apr. 12, 2006
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/.2006.1629444
Y. Huang , Dept. of Comput. Sci., George Mason Univ., Fairfax, VA, USA
D. Arsenault , Dept. of Comput. Sci., George Mason Univ., Fairfax, VA, USA
A. Sood , Dept. of Comput. Sci., George Mason Univ., Fairfax, VA, USA
Despite the increased focus on security, critical information systems remain vulnerable to cyber attacks. The problem stems in large part from the constant innovation and evolution of attack techniques. The trend leads importance to the concept of intrusion tolerance a critical system must fend off or at least limit the damage caused by unknown and/or undetected attacks. In prior work, we developed a self-cleansing intrusion tolerance (SCIT) architecture that achieves the above goal by constantly cleansing the servers and rotating the rule of individual servers. In this paper, we show that, with simple hardware enhancements strategically placed in a SCIT system, incorruptible intrusion containment can be realized. We then present an incorruptible SCIT design for use by one of the most critical infrastructures of the Internet, the domain name services. It is our belief that incorruptible intrusion containment as presented here constitutes a new, effective layer of system defense for critical information system.
domain name service, critical information system, cyber attack, self-cleansing intrusion tolerance architecture, SCIT system, network server, incorruptible intrusion containment, Internet
A. Sood, Y. Huang and D. Arsenault, "Incorruptible system self-cleansing for intrusion tolerance," 2006 IEEE International Performance Computing and Communications Conference(PCC), Phoenix, AZ, USA, 2006, pp. 66.