Design Techniques for Repairable Data Systems

国家科学基金会分布式系统研究CISE/CNSABSTRACT提案编号：0410694主要研究员：Chiueh，Tzi-Cker机构：SUNY Stony BrookProposal Title：可修复数据系统的设计技术计算机安全解决方案的最终目标是最大限度地提高其保护的系统的可用性。为了实现这一目标，过去的大多数研究都集中在通过改进检测和预防攻击的方法来增加安全漏洞之间的平均时间。然而，还有另一种替代方案，即可修复数据系统（RDS）项目所采用的方法：减少系统受损后恢复正常秩序所需的时间。更具体地说，可修复的数据系统可以在入侵后快速重启，并消除那些直接或间接由入侵留下的副作用。 构建可修复数据系统的关键设计问题是：（1）如何记录所有的更新，使每个更新都是可撤销的;（2）如何跟踪更新之间的依赖关系，使所有受攻击影响的更新都能被识别和删除。RDS项目开发了新的技术来解决网络文件服务器和关系DBMS服务器中的这两个问题。该项目的主要成果是提供一个可重用的实现框架，在现有的网络文件服务器和DBMS服务器上添加快速修复机制，而不需要对其内部进行任何修改。快速修复机制的添加大大缩短了入侵后修复过程所需的时间，提高了修复过程的准确性。因此，该技术使现有的信息系统的入侵容忍，入侵的影响被减少到一个短暂的系统中断点。该项目产生的所有软件将在SourceForge网站上公布，以供传播。Brett D.博士FleischProgram Director，CISE/CNSJune 30，2004.

National Science FoundationDistributed Systems Research CISE/CNSABSTRACTProposal Number: 0410694Principal Investigator: Chiueh, Tzi-CkerInstitution: SUNY Stony BrookProposal Title: Design Techniques for Repairable Data SystemsThe ultimate goal of a computer security solution is to maximize the availability of the system it protects. Towards this goal, most past research focused on in-creasing the mean time between security breaches by improving methods to de-tect and prevent attacks. However, there is another alternative, which is the approach that the Repairable Data System (RDS) project takes: reduce the time required to restore a system back to normal order after it is compromised. More specifically, a repairable data system can quickly restart itself after an intrusion and eliminate those and only those side effects directly or indirectly left by the intrusion. The key design issues in building repairable data systems are (1) how to log all updates so that every update is undoable, and (2) how to track the dependen-cies among updates so that all the updates affected by an attack can be identi-fied and erased. The RDS project develops novel techniques to solve these two problems in the context of network file servers and relational DBMS servers. The main result of this project is expected to be a reusable implementation framework for adding a fast repair mechanism to existing network file servers and DBMS servers without requiring any modifications to their internals The fast repair mechanism added drastically shortens the time taken by and im-proves the accuracy of the post-intrusion repair process. Therefore, this tech-nology renders existing information systems intrusion-tolerant in that the im-pact of an intrusion is diminished to the point of a transient system outage. All the software resulting from this project will be published in the SourceForge web site for dissemination. Dr. Brett D. FleischProgram Director, CISE/CNSJune 30, 2004.