文献类型：期刊文献

英文题名：Virtualization-based recovery approach for intrusion tolerance

作者：Huang, Jian-Hua[1]; Huang, Jun[1]; Li, Rong[1]; Li, Xiao-Ming[1]

机构：[1] School of Information Science and Engineering, East China University of Science and Technology, Shanghai 200237, China

年份：2013

卷号：12

期号：3

起止页码：385

外文期刊名：Information Technology Journal

收录：EI(收录号：20130515969882)

语种：英文

外文关键词：Virtual reality - Virtualization - Computer system recovery - Cluster computing

摘要：It is well known that increasing redundancy in a system generally improves the availability and dependability of the system. In this study, we present a Virtualization-based Recovery for Intrusion Tolerance (VRIT) architecture that strengthens cluster's availability and dependability through periodic and event-driven recovery. By periodically reverting each virtual server to a pristine state, the VRIT cluster can limit the online exposure time of all servers, ensuring that even undetected attacks will be thwarted or at least be limited. Anomaly detection engines are installed in every virtual server to enable event-driven recovery within a fixed recovery cycle. Accumulated intrusion reports will prompt the compromised servers to be reverted earlier. A control algorithm is designed to manage both security and service availability. Experimental results demonstrate good performance of the algorithm. ? 2013 Asian Network for Scientific Information.