Performance, Computing, and Communications Conference, 2002. 21st IEEE International (2006)
Phoenix, AZ, USA
Apr. 10, 2006 to Apr. 12, 2006
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/.2006.1629444
Y. Huang , Dept. of Comput. Sci., George Mason Univ., Fairfax, VA, USA
D. Arsenault , Dept. of Comput. Sci., George Mason Univ., Fairfax, VA, USA
A. Sood , Dept. of Comput. Sci., George Mason Univ., Fairfax, VA, USA
Despite the increased focus on security, critical information systems remain vulnerable to cyber attacks. The problem stems in large part from the constant innovation and evolution of attack techniques. The trend leads importance to the concept of intrusion tolerance a critical system must fend off or at least limit the damage caused by unknown and/or undetected attacks. In prior work, we developed a self-cleansing intrusion tolerance (SCIT) architecture that achieves the above goal by constantly cleansing the servers and rotating the rule of individual servers. In this paper, we show that, with simple hardware enhancements strategically placed in a SCIT system, incorruptible intrusion containment can be realized. We then present an incorruptible SCIT design for use by one of the most critical infrastructures of the Internet, the domain name services. It is our belief that incorruptible intrusion containment as presented here constitutes a new, effective layer of system defense for critical information system.
domain name service, critical information system, cyber attack, self-cleansing intrusion tolerance architecture, SCIT system, network server, incorruptible intrusion containment, Internet
A. Sood, Y. Huang and D. Arsenault, "Incorruptible system self-cleansing for intrusion tolerance," Performance, Computing, and Communications Conference, 2002. 21st IEEE International(PCC), Phoenix, AZ, USA, 2006, pp. 66.