Toggle Main Menu Toggle Search

Open Access padlockePrints

The Newcastle University research output collection, currently available on ePrints, will shortly be moving to a new open repository platform, Figshare. To prepare for the data migration we have paused adding new content to ePrints, and will resume once the new repository is launched. During this time you will continue to have access to ePrints (but no new content will appear). We will share updates here when available.

Assessing the Attack Resilience Capabilities of a Fortified Primary Backup System

Lookup NU author(s): Dr Dylan Clarke, Dr Paul EzhilchelvanORCiD

Downloads

Licence

This is the final published version of a conference proceedings (inc. abstract) published in its final definitive form in 2010. For re-use rights please refer to the publishers terms and conditions.

Abstract

Primary-Backup service replication does not constrain that theservice be built as a deterministic state machine. It is meant totolerate crashes, not intrusions. We consider an approach, calledFORTRESS, for adding intrusion-resilience capability to aprimary-backup server system. It involves using proxies that blockclients from directly accessing servers, and periodicallyrandomizing the executables of proxies and servers. We argue thatproxies and proactive randomization can offer sound defense againstattacks including de-randomization attacks. Using simulations, wethen compare the attack resilience that FORTRESS adds to aprimary-backup server system with that attainable through statemachine replication (SMR) that is fit only for deterministicservices. A significant observation is that FORTRESS emerges to bemore resilient than an SMR system of four server replicas that arediversely randomized at the start and are subject to proactiverecovery throughout.

Publication metadata

Author(s): Clarke D, Ezhilchelvan P

Publication type: Conference Proceedings (inc. Abstract)

Publication status: Published

Conference Name: 4th DSN Workshop on Recent Advances in Intrusion-Tolerant Systems (WRAITS)

Year of Conference: 2010

Pages: 6pp

Date deposited: 15/11/2010

URL: http://wraits10.di.fc.ul.pt/paper%207.pdf

Share