Collaborative Research: CT-T: Transparent Damage Quarantine and Recovery in Transactional Applications and Web Services

该项目解决了透明的损害隔离和恢复（DQR），这是大量使命/生命/业务关键型应用程序和信息系统面临的一个重要问题，这些应用程序和信息系统必须在严重网络攻击的情况下管理风险、业务连续性和保证。今天，这些关键应用程序仍然有一个？好吗？有机会遭受一个大？打？免受攻击由于数据共享，相互依赖和互操作性，打击可能会大大？放大？造成灾难性的连锁反应，这可能？武力？传统的故障恢复技术虽然在处理随机故障方面比较成熟，但由于故障恢复和攻击恢复之间的几个基本区别，因此不能解决DQR问题。 DQR并不是一个新概念，但在为现实世界的应用程序设计实用的DQR功能方面仍然存在很大的差距，并且没有以前的DQR技术解决Web服务或面向服务的体系结构。在这个项目中，我们将采取一种整体的方法，并在DQR的四个基本方面：理论，机制，应用和系统上做出一系列综合的创新贡献。建议的创新包括第一个理论，集成可恢复性和可恢复性，第一个DQR计划，使用基于标记的因果关系跟踪，以取代读写依赖分析，一种新的DQR计划，这样做？免清洗吗恢复，以及第一套Web服务的DQR理论和机制。此外，完整的开源DQR工具和系统将被原型化。

This project addresses transparent Damage Quarantine and Recovery (DQR), an important problem faced by a large number of mission/life/business-critical applications and information systems that must manage risk, business continuity, and assurance in the presence of severe cyber attacks. Today, these critical applications still have a ?good? chance to suffer from a big ?hit? from attacks. Due to data sharing, interdependencies, and interoperability, the hit could greatly ?amplify? its damage by causing catastrophic cascading effects, which may ?force? an application to halt for hours or even days before the application is recovered.Traditional failure recovery techniques, though mature in handling random failures, cannot solve the DQR problem due to several fundamental differences between failure recovery and attack recovery. DQR is not a new concept, but there is still a big gap in engineering practical DQR capabilities for real-world applications, and no prior DQR techniques address Web Services or Service-Oriented Architectures. In this project, we will take a holistic approach and make an integrated set of innovative contributions on four fundamental aspects of DQR: theories, mechanisms, applications, and systems. The proposed innovations include the first theory that integrates recoverability and quarantinability, the first DQR scheme that uses mark-based causality tracing to replace read-write-dependency analysis, a novel DQR scheme that does ?cleaning-free? recovery, and the first set of DQR theories and mechanisms for Web Services. In addition, complete open-source DQR tools and systems will be prototyped.