Collaborative Research: CT-T: Transparent Damage Quarantine and Recovery in Transactional Applications and Web Services

本项目解决透明的损害隔离和恢复（DQR）问题，这是大量任务/寿命/关键业务应用程序和信息系统面临的一个重要问题，这些应用程序和信息系统必须在存在严重网络攻击的情况下管理风险、业务连续性和保障。今天，这些关键的应用程序仍然有一个良好的？遭受重大打击的机会？从攻击。由于数据共享、相互依赖和互操作性，这种打击可能会大大放大。它的破坏是通过造成灾难性的级联效应，这可能会迫使？在应用程序恢复之前，应用程序可能会停止几个小时甚至几天。传统的故障恢复技术虽然在处理随机故障方面很成熟，但由于故障恢复和攻击恢复之间存在一些根本性的区别，因此无法解决DQR问题。DQR并不是一个新概念，但是在实际应用程序的工程实际DQR能力方面仍然存在很大的差距，并且之前没有DQR技术解决Web服务或面向服务的体系结构。在本项目中，我们将采取整体的方法，在DQR的理论、机制、应用和系统四个基本方面做出综合的创新贡献。提出的创新包括第一个集成可恢复性和隔离性的理论，第一个使用基于标记的因果关系跟踪来取代读写依赖分析的DQR方案，一个新的DQR方案，实现“无清理”？以及第一套用于Web服务的DQR理论和机制。此外，完整的开源DQR工具和系统将被原型化。

This project addresses transparent Damage Quarantine and Recovery (DQR), an important problem faced by a large number of mission/life/business-critical applications and information systems that must manage risk, business continuity, and assurance in the presence of severe cyber attacks. Today, these critical applications still have a ?good? chance to suffer from a big ?hit? from attacks. Due to data sharing, interdependencies, and interoperability, the hit could greatly ?amplify? its damage by causing catastrophic cascading effects, which may ?force? an application to halt for hours or even days before the application is recovered. Traditional failure recovery techniques, though mature in handling random failures, cannot solve the DQR problem due to several fundamental differences between failure recovery and attack recovery. DQR is not a new concept, but there is still a big gap in engineering practical DQR capabilities for real-world applications, and no prior DQR techniques address Web Services or Service-Oriented Architectures. In this project, we will take a holistic approach and make an integrated set of innovative contributions on four fundamental aspects of DQR: theories, mechanisms, applications, and systems. The proposed innovations include the first theory that integrates recoverability and quarantinability, the first DQR scheme that uses mark-based causality tracing to replace read-write-dependency analysis, a novel DQR scheme that does ?cleaning-free? recovery, and the first set of DQR theories and mechanisms for Web Services. In addition, complete open-source DQR tools and systems will be prototyped.