Design Techniques for Repairable Data Systems

国家科学基金会分布式系统研究CEISE/CNSABSTRACT建议编号：0410694主要研究员：Chiueh，Tzi-CkerInstitution：纽约州立大学石溪分校建议标题：可修复数据系统的设计技术计算机安全解决方案的最终目标是最大化其保护的系统的可用性。为了达到这一目标，过去的大多数研究都集中在通过改进检测和预防攻击的方法来增加安全漏洞的平均间隔时间。然而，还有另一种选择，这是可修复数据系统(RDS)项目采取的方法：减少系统在受损后恢复到正常秩序所需的时间。更具体地说，可修复的数据系统可以在入侵后快速重新启动，并消除那些并且只消除入侵直接或间接留下的副作用。构建可修复数据系统的关键设计问题是：(1)如何记录所有更新，使每个更新都是可撤销的；(2)如何跟踪更新之间的依赖关系，以便识别和删除受攻击影响的所有更新。RDS项目开发了在网络文件服务器和关系型DBMS服务器环境中解决这两个问题的新技术。该项目的主要成果是一个可重用的实现框架，用于在不需要对现有网络文件服务器和DBMS服务器的内部进行任何修改的情况下，为其添加快速修复机制。添加的快速修复机制大大缩短了入侵后修复过程所需的时间，并提高了入侵后修复过程的准确性。因此，这种技术使现有的信息系统具有入侵容忍性，因为入侵的影响被减小到系统暂时中断的程度。该项目产生的所有软件都将在SourceForge网站上发布，以供分发。布雷特·D·弗莱施博士，项目主任，CEISE/CNS，2004年6月30日。

National Science FoundationDistributed Systems Research CISE/CNSABSTRACTProposal Number: 0410694Principal Investigator: Chiueh, Tzi-CkerInstitution: SUNY Stony BrookProposal Title: Design Techniques for Repairable Data SystemsThe ultimate goal of a computer security solution is to maximize the availability of the system it protects. Towards this goal, most past research focused on in-creasing the mean time between security breaches by improving methods to de-tect and prevent attacks. However, there is another alternative, which is the approach that the Repairable Data System (RDS) project takes: reduce the time required to restore a system back to normal order after it is compromised. More specifically, a repairable data system can quickly restart itself after an intrusion and eliminate those and only those side effects directly or indirectly left by the intrusion. The key design issues in building repairable data systems are (1) how to log all updates so that every update is undoable, and (2) how to track the dependen-cies among updates so that all the updates affected by an attack can be identi-fied and erased. The RDS project develops novel techniques to solve these two problems in the context of network file servers and relational DBMS servers. The main result of this project is expected to be a reusable implementation framework for adding a fast repair mechanism to existing network file servers and DBMS servers without requiring any modifications to their internals The fast repair mechanism added drastically shortens the time taken by and im-proves the accuracy of the post-intrusion repair process. Therefore, this tech-nology renders existing information systems intrusion-tolerant in that the im-pact of an intrusion is diminished to the point of a transient system outage. All the software resulting from this project will be published in the SourceForge web site for dissemination. Dr. Brett D. FleischProgram Director, CISE/CNSJune 30, 2004.