CT-ISG: Intrusion Tolerant Software: Achieving, Confidentiality, Availability and Integrity Simultaneously

提案编号0524651标题：CT-ISG：入侵容忍软件：同时实现、保密、可用性和完整性PI Santosh Pande，格鲁吉亚技术入侵容忍软件需要在活跃的网络攻击期间维持关键系统的运行。本研究的重点是如何在合理的性能代价下创建入侵容忍软件。将设计出接近真实的时间检测软件入侵的方法，因此它们的效果将更容易被容忍。使用编译器技术和体系结构的支持相结合，机制针点篡改的值，并提供保证恢复原始（未篡改）的值将进行调查。最后，研究几个优化，可以支持这些保证没有广泛的性能下降。这些方法的成功示范可以改善对关键数据的保护，并可能导致在关键基础设施系统中使用这些方法。该研究还将使人们更深入地了解如何为必须提供连续服务的系统同时实现数据的机密性、完整性和可用性。

Proposal Number 0524651 TITLE: CT-ISG : Intrusion Tolerant Software: Achieving, Confidentiality, Availability and Integrity Simultaneously PI Santosh Pande, Georgia Tech Intrusion tolerant software is needed to sustain operations of critical systems during active cyber attacks. This research focuses on how to create intrusion tolerant software at reasonable performance cost. Methods will be devised to detect software intrusions in near real time, so their effects will be easier to tolerate. Using a combination of compiler techniques and architectural support, mechanisms to pin-point tampered values and offer guarantees of recovering original (untampered) values will be investigated. Finally, studies of several optimizations that can support these guarantees without extensive performance degradation will be undertaken. Successful demonstration of these methods could improve protection of critical data and could lead to their use in critical infrastructure systems. The research will also lead to deeper understanding of how to achieve data confidentiality, integrity, and availability simultaneously for systems that must provide continuous service.