CT-ISG: Intrusion Tolerant Software: Achieving, Confidentiality, Availability and Integrity Simultaneously

CT-ISG：入侵容忍软件：同时实现、机密性、可用性和完整性

• 批准号: 0524651
• 负责人: Santosh Pande
• 金额: --
• 依托单位: Georgia Tech Research Corporation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2005
• 资助国家: 美国
• 起止时间: 2005-09-01 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0524651&HistoricalAwards=false
• 关键词: CT; ISG; Intrusion; Tolerant; Software

Proposal Number 0524651 TITLE: CT-ISG : Intrusion Tolerant Software: Achieving, Confidentiality, Availability and Integrity Simultaneously PI Santosh Pande, Georgia Tech Intrusion tolerant software is needed to sustain operations of critical systems during active cyber attacks. This research focuses on how to create intrusion tolerant software at reasonable performance cost. Methods will be devised to detect software intrusions in near real time, so their effects will be easier to tolerate. Using a combination of compiler techniques and architectural support, mechanisms to pin-point tampered values and offer guarantees of recovering original (untampered) values will be investigated. Finally, studies of several optimizations that can support these guarantees without extensive performance degradation will be undertaken. Successful demonstration of these methods could improve protection of critical data and could lead to their use in critical infrastructure systems. The research will also lead to deeper understanding of how to achieve data confidentiality, integrity, and availability simultaneously for systems that must provide continuous service.

提案编号0524651标题：CT-ISG：入侵容忍软件：同时实现、保密、可用性和完整性PI Santosh Pande，格鲁吉亚技术入侵容忍软件需要在活跃的网络攻击期间维持关键系统的运行。本研究的重点是如何在合理的性能代价下创建入侵容忍软件。将设计出接近真实的时间检测软件入侵的方法，因此它们的效果将更容易被容忍。使用编译器技术和体系结构的支持相结合，机制针点篡改的值，并提供保证恢复原始（未篡改）的值将进行调查。最后，研究几个优化，可以支持这些保证没有广泛的性能下降。这些方法的成功示范可以改善对关键数据的保护，并可能导致在关键基础设施系统中使用这些方法。该研究还将使人们更深入地了解如何为必须提供连续服务的系统同时实现数据的机密性、完整性和可用性。