Analysis of operating system diversity for intrusion tolerance
Analysis of operating system diversity for intrusion tolerance
复制标题
操作系统多样性入侵容忍分析
DOI：
10.1002/spe.2180
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
R. Obelheiro
中科院分区：
文献类型：
--
作者：
Miguel Garcia;A. Bessani;Ilir Gashi;Nuno Ferreira Neves;R. Obelheiro
使用入侵容忍系统的主要好处之一是在攻击和入侵存在时确保正确行为的可能性。这些安全性增益直接依赖于显示故障多样性的组件。在实际部署中观察到的故障多样性的程度取决于构成系统的组件的多样性。本文利用NIST国家漏洞数据库（NVD）中的操作系统（OS）漏洞数据进行研究。我们分析了18年来11种不同操作系统的漏洞，以检查这些漏洞中有多少出现在多个操作系统中。我们发现，对于几种操作系统组合来说，这个数字很低。因此，尽管对于使用NVD数据来支持明确的结论有一些警告，但我们的分析表明，通过选择适当的操作系统，可以排除（或大大减少）在入侵容忍系统的副本中发生的常见漏洞。版权所有©2013 John Wiley & Sons， Ltd
One of the key benefits of using intrusion‐tolerant systems is the possibility of ensuring correct behavior in the presence of attacks and intrusions. These security gains are directly dependent on the components exhibiting failure diversity. To what extent failure diversity is observed in practical deployment depends on how diverse are the components that constitute the system. In this paper, we present a study with operating system's (OS's) vulnerability data from the NIST National Vulnerability Database (NVD). We have analyzed the vulnerabilities of 11 different OSs over a period of 18 years, to check how many of these vulnerabilities occur in more than one OS. We found this number to be low for several combinations of OSs. Hence, although there are a few caveats on the use of NVD data to support definitive conclusions, our analysis shows that by selecting appropriate OSs, one can preclude (or reduce substantially) common vulnerabilities from occurring in the replicas of the intrusion‐tolerant system. Copyright © 2013 John Wiley & Sons, Ltd.
DOI：
10.1145/2168836.2168866
发表时间：
2012-04
期刊：
--
影响因子：
--
作者：
R. Kapitza;J. Behl;C. Cachin;T. Distler;Simon Kuhnle;Seyed Vahid Mohammadi;Wolfgang Schröder-Preikschat;Klaus Stengel
通讯作者：
R. Kapitza;J. Behl;C. Cachin;T. Distler;Simon Kuhnle;Seyed Vahid Mohammadi;Wolfgang Schröder-Preikschat;Klaus Stengel