Cross Layer Techniques for Intrusion Tolerant Networks

在过去的十年中，无线网络的激增使得安全性成为这些网络和必须使用它们的应用程序的主要关注点。无线网络具有使其与传统有线网络显著不同的基本特征，特别是在安全性和可靠性方面。此外，存在经由无线接入来接入驻留在固定（例如，企业）网络上的服务的增长趋势。因此，安全可靠的无线网络的设计提出了一个重大的挑战，下一代网络的设计人员与一般公众无线接入。人们还预计，许多未来的网络将不得不生活在攻击的威胁之下。目前的研究试图保护网络免受所有类型的攻击，在任何时候，一般不考虑网络性能的成本。本研究旨在探讨一种新型的集成，灵活，智能的安全体系结构，提供容忍入侵攻击对下一代网络的无线接入。因此，我们的目标不是防止入侵，而是使网络架构能够抵御它们。中心的工作将是一个分布式的入侵容忍系统，是基于跨层检测和缓解方法的设计。因此，入侵检测和缓解将被集成在网络的分层架构中，以便网络能够智能地了解整个网络中任何时候构成的威胁的总体水平。这种方法带来了一些显着的优势，现有的入侵检测系统（IDS），特别是当应用到无线接入网络，必须承受一定程度的攻击，在较长的时间。

The proliferation of wireless networks over the past decade has made security a major concern for these networks and the applications that have to use them. Wireless networks have fundamental characteristics that make them significantly different from traditional wired networks, particularly with regard to security and reliability. Moreover there is an increasing trend for access to services residing on fixed (e.g. enterprise) networks via wireless access. Therefore the design of secure and reliable wireless networks presents a major challenge to the designers of next generation networks with general public wireless access. It is also expected that many future networks will have to live under the threat of attacks as a matter of course. Current research attempts to secure networks against all types of attack, at all times and generally irrespective of the cost to the performance of the network. This research proposal aims to investigate a new type of integrated, flexible, and intelligent security architecture for providing tolerance to intrusion attacks against next generation networks with wireless access. Thus our goal is not to prevent intrusions but to enable network architectures to withstand them. Central to the work will be the design of a distributed Intrusion tolerance system that is based on a cross layer detection and mitigation approach. As such, intrusion detection and mitigation will be integrated within the layered architecture of the network so that the network has an intelligent view of the overall level of threat(s) posed at any time throughout the network. This approach brings a number of significant advantages over existing intrusion detection systems (IDS) particularly when applied to wireless access networks that have to withstand some level of attacks over prolonged periods.