Collaborative Research: CT-T: Transparent Damage Quarantine and Recovery in Transactional Applications and Web Services

该项目解决了透明损害隔离和恢复(DQR)，这是大量任务/生命/业务关键应用程序和信息系统面临的重要问题，这些应用程序和信息系统必须在出现严重网络攻击时管理风险、业务连续性和保证。今天，这些关键应用程序仍然有一个？好的？遭受重大打击的机会？免受攻击。由于数据共享、相互依赖和互操作性，HIT可能会极大地放大？它通过造成灾难性的连锁效应对其造成破坏，这可能是什么力量？在恢复应用程序之前暂停几个小时甚至几天的应用程序。传统的故障恢复技术虽然在处理随机故障方面已经成熟，但由于故障恢复和攻击恢复之间的几个根本区别，无法解决DQR问题。DQR不是一个新概念，但在为现实世界的应用程序设计实用的DQR功能方面仍有很大差距，并且之前的DQR技术还没有解决Web服务或面向服务的体系结构。在这个项目中，我们将采取整体的方法，在DQR的四个基本方面：理论、机制、应用和系统做出一整套创新贡献。提出的创新包括第一个整合了可恢复性和可隔离性的理论，第一个使用基于标记的因果跟踪来取代读写依赖分析的DQR方案，一个新的DQR方案。恢复，以及第一套用于Web服务的DQR理论和机制。此外，完整的开源DQR工具和系统将成为原型。

This project addresses transparent Damage Quarantine and Recovery (DQR), an important problem faced by a large number of mission/life/business-critical applications and information systems that must manage risk, business continuity, and assurance in the presence of severe cyber attacks. Today, these critical applications still have a ?good? chance to suffer from a big ?hit? from attacks. Due to data sharing, interdependencies, and interoperability, the hit could greatly ?amplify? its damage by causing catastrophic cascading effects, which may ?force? an application to halt for hours or even days before the application is recovered.Traditional failure recovery techniques, though mature in handling random failures, cannot solve the DQR problem due to several fundamental differences between failure recovery and attack recovery. DQR is not a new concept, but there is still a big gap in engineering practical DQR capabilities for real-world applications, and no prior DQR techniques address Web Services or Service-Oriented Architectures. In this project, we will take a holistic approach and make an integrated set of innovative contributions on four fundamental aspects of DQR: theories, mechanisms, applications, and systems. The proposed innovations include the first theory that integrates recoverability and quarantinability, the first DQR scheme that uses mark-based causality tracing to replace read-write-dependency analysis, a novel DQR scheme that does ?cleaning-free? recovery, and the first set of DQR theories and mechanisms for Web Services. In addition, complete open-source DQR tools and systems will be prototyped.