IEICE TRANSACTIONS on Information
Hybrid Recovery-Based Intrusion Tolerant System for Practical Cyber-Defense
Summary :
Due to the periodic recovery of virtual machines regardless of whether malicious intrusions exist, proactive recovery-based Intrusion Tolerant Systems (ITSs) are being considered for mission-critical applications. However, the virtual replicas can easily be exposed to attacks during their working period, and additionally, proactive recovery-based ITSs are ineffective in eliminating the vulnerability of exposure time, which is closely related to service availability. To address these problems, we propose a novel hybrid recovery-based ITS in this paper. The proposed method utilizes availability-driven recovery and dynamic cluster resizing. The availability-driven recovery method operates the recovery process by both proactive and reactive ways for the system to gain shorter exposure times and higher success rates. The dynamic cluster resizing method reduces the overhead of the system that occurs from dynamic workload fluctuations. The performance of the proposed ITS with various synthetic and real workloads using CloudSim showed that it guarantees higher availability and reliability of the system, even under malicious intrusions such as DDoS attacks.
- Publication
- IEICE TRANSACTIONS on Information Vol.E99-D No.4 pp.1081-1091
- Publication Date
- 2016/04/01
- Publicized
- 2016/01/29
- Online ISSN
- 1745-1361
- DOI
- 10.1587/transinf.2015CYP0006
- Type of Manuscript
- Special Section PAPER (Special Section on Cyberworlds)
- Category
Authors
Bumsoon JANG
KAIST
Seokjoo DOO
Korea Army Academy at Yeong-Cheon
Soojin LEE
Korea National Defense University
Hyunsoo YOON
KAIST
Keyword
Latest Issue
Copyrights notice of machine-translated contents
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Cite this
Copy
Bumsoon JANG, Seokjoo DOO, Soojin LEE, Hyunsoo YOON, "Hybrid Recovery-Based Intrusion Tolerant System for Practical Cyber-Defense" in IEICE TRANSACTIONS on Information,
vol. E99-D, no. 4, pp. 1081-1091, April 2016, doi: 10.1587/transinf.2015CYP0006.
Abstract: Due to the periodic recovery of virtual machines regardless of whether malicious intrusions exist, proactive recovery-based Intrusion Tolerant Systems (ITSs) are being considered for mission-critical applications. However, the virtual replicas can easily be exposed to attacks during their working period, and additionally, proactive recovery-based ITSs are ineffective in eliminating the vulnerability of exposure time, which is closely related to service availability. To address these problems, we propose a novel hybrid recovery-based ITS in this paper. The proposed method utilizes availability-driven recovery and dynamic cluster resizing. The availability-driven recovery method operates the recovery process by both proactive and reactive ways for the system to gain shorter exposure times and higher success rates. The dynamic cluster resizing method reduces the overhead of the system that occurs from dynamic workload fluctuations. The performance of the proposed ITS with various synthetic and real workloads using CloudSim showed that it guarantees higher availability and reliability of the system, even under malicious intrusions such as DDoS attacks.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.2015CYP0006/_p
Copy
@ARTICLE{e99-d_4_1081,
author={Bumsoon JANG, Seokjoo DOO, Soojin LEE, Hyunsoo YOON, },
journal={IEICE TRANSACTIONS on Information},
title={Hybrid Recovery-Based Intrusion Tolerant System for Practical Cyber-Defense},
year={2016},
volume={E99-D},
number={4},
pages={1081-1091},
abstract={Due to the periodic recovery of virtual machines regardless of whether malicious intrusions exist, proactive recovery-based Intrusion Tolerant Systems (ITSs) are being considered for mission-critical applications. However, the virtual replicas can easily be exposed to attacks during their working period, and additionally, proactive recovery-based ITSs are ineffective in eliminating the vulnerability of exposure time, which is closely related to service availability. To address these problems, we propose a novel hybrid recovery-based ITS in this paper. The proposed method utilizes availability-driven recovery and dynamic cluster resizing. The availability-driven recovery method operates the recovery process by both proactive and reactive ways for the system to gain shorter exposure times and higher success rates. The dynamic cluster resizing method reduces the overhead of the system that occurs from dynamic workload fluctuations. The performance of the proposed ITS with various synthetic and real workloads using CloudSim showed that it guarantees higher availability and reliability of the system, even under malicious intrusions such as DDoS attacks.},
keywords={},
doi={10.1587/transinf.2015CYP0006},
ISSN={1745-1361},
month={April},}
Copy
TY - JOUR
TI - Hybrid Recovery-Based Intrusion Tolerant System for Practical Cyber-Defense
T2 - IEICE TRANSACTIONS on Information
SP - 1081
EP - 1091
AU - Bumsoon JANG
AU - Seokjoo DOO
AU - Soojin LEE
AU - Hyunsoo YOON
PY - 2016
DO - 10.1587/transinf.2015CYP0006
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E99-D
IS - 4
JA - IEICE TRANSACTIONS on Information
Y1 - April 2016
AB - Due to the periodic recovery of virtual machines regardless of whether malicious intrusions exist, proactive recovery-based Intrusion Tolerant Systems (ITSs) are being considered for mission-critical applications. However, the virtual replicas can easily be exposed to attacks during their working period, and additionally, proactive recovery-based ITSs are ineffective in eliminating the vulnerability of exposure time, which is closely related to service availability. To address these problems, we propose a novel hybrid recovery-based ITS in this paper. The proposed method utilizes availability-driven recovery and dynamic cluster resizing. The availability-driven recovery method operates the recovery process by both proactive and reactive ways for the system to gain shorter exposure times and higher success rates. The dynamic cluster resizing method reduces the overhead of the system that occurs from dynamic workload fluctuations. The performance of the proposed ITS with various synthetic and real workloads using CloudSim showed that it guarantees higher availability and reliability of the system, even under malicious intrusions such as DDoS attacks.
ER -
English
