Survivability Analysis of VM-Based Intrusion Tolerant Systems
Survivability Analysis of VM-Based Intrusion Tolerant Systems
复制标题
DOI：
10.1587/transinf.2015pap0007
复制
发表时间：
2015-12
期刊：
影响因子：
--
通讯作者：
Junjun Zheng;H. Okamura;T. Dohi
中科院分区：
文献类型：
--
作者：
Junjun Zheng;H. Okamura;T. Dohi
可生存性是指即使在入侵和危害发生后，系统仍能及时提供服务的能力。在本文中，我们专注于基于虚拟机（VM）的入侵容忍系统的生存性的定量分析，在拜占庭故障的恶意攻击。入侵容忍系统是指系统在受到入侵的情况下仍能继续提供正确的服务。提出了一种虚拟化的入侵容忍系统方案，并利用马尔可夫链推导出了虚拟机因安全漏洞被恶意攻击入侵的情况下，一次请求的成功概率。最后，在数值实验中，我们从可生存性的角度对基于虚拟机的入侵容忍系统的性能进行了评估。关键词：入侵容忍系统，拜占庭失效，虚拟化，可生存性，马尔可夫模型
Survivability is the capability of a system to provide its services in a timely manner even after intrusion and compromise occur. In this paper, we focus on the quantitative analysis of survivability of virtual machine (VM) based intrusion tolerant system in the presence of Byzantine failures due to malicious attacks. Intrusion tolerant system has the ability of a system to continuously provide correct services even if the system is intruded. This paper introduces a scheme of the intrusion tolerant system with virtualization, and derives the success probability for one request by a Markov chain under the environment where VMs have been intruded due to a security hole by malicious attacks. Finally, in numerical experiments, we evaluate the performance of VM-based intrusion tolerant system from the viewpoint of survivability. key words: intrusion tolerant system, byzantine failure, virtualization, survivability, Markov model