Design Techniques for Repairable Data Systems

国家科学基金分布式系统研究CISE/CNSABSTRACTProposal Number: 0410694首席研究员：Chiueh， Tzi-CkerInstitution: SUNY Stony brook分校提案题目：可修复数据系统的设计技术计算机安全解决方案的最终目标是最大限度地提高其保护的系统的可用性。为了实现这一目标，过去的大多数研究都集中在通过改进检测和防止攻击的方法来增加安全漏洞之间的平均时间。然而，还有另一种替代方法，即可修复数据系统（repair Data System， RDS）项目采用的方法：减少在系统受到损害后将其恢复到正常秩序所需的时间。更具体地说，一个可修复的数据系统可以在入侵后迅速重新启动，并消除那些直接或间接由入侵留下的副作用。构建可修复数据系统的关键设计问题是(1)如何记录所有更新，以便每个更新都是可撤销的，以及(2)如何跟踪更新之间的依赖关系，以便可以识别和删除受攻击影响的所有更新。RDS项目开发了新的技术来解决网络文件服务器和关系DBMS服务器环境中的这两个问题。这个项目的主要成果是一个可重用的实现框架，为现有的网络文件服务器和DBMS服务器添加快速修复机制，而不需要对其内部进行任何修改。添加的快速修复机制大大缩短了入侵后修复过程所花费的时间，并提高了修复过程的准确性。因此，该技术使现有的信息系统具有入侵容忍度，因为入侵的影响被减少到系统暂时中断的程度。该项目产生的所有软件将在SourceForge网站上发布以供传播。Brett D. fleisch博士CISE/ cns2004年6月30日项目主任。

National Science FoundationDistributed Systems Research CISE/CNSABSTRACTProposal Number: 0410694Principal Investigator: Chiueh, Tzi-CkerInstitution: SUNY Stony BrookProposal Title: Design Techniques for Repairable Data SystemsThe ultimate goal of a computer security solution is to maximize the availability of the system it protects. Towards this goal, most past research focused on in-creasing the mean time between security breaches by improving methods to de-tect and prevent attacks. However, there is another alternative, which is the approach that the Repairable Data System (RDS) project takes: reduce the time required to restore a system back to normal order after it is compromised. More specifically, a repairable data system can quickly restart itself after an intrusion and eliminate those and only those side effects directly or indirectly left by the intrusion. The key design issues in building repairable data systems are (1) how to log all updates so that every update is undoable, and (2) how to track the dependen-cies among updates so that all the updates affected by an attack can be identi-fied and erased. The RDS project develops novel techniques to solve these two problems in the context of network file servers and relational DBMS servers. The main result of this project is expected to be a reusable implementation framework for adding a fast repair mechanism to existing network file servers and DBMS servers without requiring any modifications to their internals The fast repair mechanism added drastically shortens the time taken by and im-proves the accuracy of the post-intrusion repair process. Therefore, this tech-nology renders existing information systems intrusion-tolerant in that the im-pact of an intrusion is diminished to the point of a transient system outage. All the software resulting from this project will be published in the SourceForge web site for dissemination. Dr. Brett D. FleischProgram Director, CISE/CNSJune 30, 2004.