On the design of an global intrusion tolerance network architecture against the internet catastrophes

NCUIR > School of Management at National Central University > Graduate Institute of Information Management > journal & Dissertation > Item 987654321/29669

Please use this identifier to cite or link to this item: http://ir.lib.ncu.edu.tw/handle/987654321/29669

Title:	On the design of an global intrusion tolerance network architecture against the internet catastrophes
Authors:	Sun,WC;Chen,YM
Contributors:	資訊管理研究所
Keywords:	DETECTION SYSTEM;SERVICE ATTACKS
Date:	2009
Issue Date:	2010-06-29 20:37:48 (UTC+8)
Publisher:	中央大學
Abstract:	Today's security communities face a daunting challenges - how to protect the Internet from new, unknown zero day worms. Due to their innovation, these worms are hard to be stopped by traditional security mechanisms. Therefore, instead of trying to prevent the intrusion of every such a thread, this paper proposes a new system architecture, named Virtual Machine based Intrusion Tolerance Network (VMITN), which will tolerate the new worm attack until administrators remove the Vulnerability lever-aged by the worm. The VMITN adopts a rough-set based recognition mechanism to detect zero day worms and a virtual machine based overlay network to mitigate attacks. We have implemented a concept proof prototype system and use NS-2 simulations to study the performance of the VMITN in a large scale network. The behavior of the famous Witty worm is simulated within the NS-2 module and the simulations result showed that our VMITN architecture can provide the reliability and survivability under severe worm attacks. (C) 2009 Elsevier Inc. All rights reserved.
Relation:	JOURNAL OF SYSTEMS AND SOFTWARE
Appears in Collections:	[Graduate Institute of Information Management] journal & Dissertation

Files in This Item:

File	Description	Size	Format
index.html		0Kb	HTML	576	View/Open

社群 sharing