서비스 보안 수준을 고려한 서버 클러스터링 기반 침입감내시스템 설계
Design of Intrusion Tolerance System with Server Clustering based on Service Security Level
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 적 사이버전 수행으로 인해서 컴퓨터 시스템 내에 취약점이 증대되고 있고 악의적인 해커들을 통해서 취약점을 이용한 공격이 이뤄지고 있다. 비록 기존 방어솔루션인 IDS나 IPS를 통해서 내외부적 공격을 방어하고 있지만, 제로데이와 같이 알려지지 않은 공격 등으로 부터 시스템을 완벽히 방어하기에는 불가능하다. 따라서 침입감내시스템은 적의 침입을 어느정도 허용하더라도 중요서비스를 지키고 정상적인 서비스를 제공하는 데에 목표가 있다. 이 논문에서는 서버 클러스터링을 통한 침입감내시스템을 제안하였다. 서비스별 중요도에 따라서 Security cluster와 Normal cluster로 구분하여서 보안성이 중요시 되는 서비스를 보호하면서도 중요 서비스의 최소 서비스 보장을 유지할 수 있는 침입감내시스템을 제안하였다. Cloudsim 시뮬레이터를 통해서 보안성 수준과 요구되는 가상화머신의 수를 기존 침입감내시스템인 SCIT(Self Cleansing Intrusion Tolerance)와 비교분석하였다.
Abstract
Internet is an open space where a number of computer systems are connected to one another. Unfortunately, as systems provide many functionalities with users, they have vulnerabilities that can be used by malicious users who try to intrude into a system. Although such malicious activities by either internal or external adversaries can be defended by conventional security systems such as Intrusion Detection and Prevention System (IDPS), it is not always possible to defend a target system against the attacks completely. For this reason, Intrusion Tolerance System (ITS) has been proposed to maintain service provision even under threatening environments, where some attacks succeed in part. In this paper, we propose an ITS based on the server clustering scheme where servers are grouped into a cluster according to the security level because each service requires a different security level. The proposed scheme allocates spare servers to a cluster, called a security cluster, since more resources should be ready to be assigned to the security cluster to maintain a higher security level. By this way, the proposed system can maintain the performance of services to clients.
참고문헌 (13)
- 권오민, "침입감내 시스템 연구 동향조사", 한국정보과학회 학술발표논문집 (2012)
- 최영윤, "군전자통신" (2016), 황금알
- Arsenault, David, "Secure, resilient computing clusters: self-cleansing intrusion tolerance with hardware enforced security (SCIT", HES), 2007, ~
- Heo, Seondong, "A Survey on Intrusion-Tolerant System", Journal of Computing Science and Engineering, pp.242~250 (2013)
- Lim, Jungmin, "A novel Adaptive Cluster Transformation (ACT)-based intrusion tolerant architecture for hybrid information technology", The Journal of Supercomputing, 66(2), pp.918~935 (2013)
- Lim, Jungmin, "Ubiquitous Computing Application and Wireless Sensor", pp.361~375 (2015), Springer
- P. Verrissimo, "Intrusion Tolerance :Concepts and Design Principles", Architecting Dependable Systems, 2677 (2003)
- Q. Nquyen, "Quantitative Approach to Tuning of a Time-Based Intrusion-Tolerance System", 3rd Workshop on Recent Advances in Intrusion Tolerance System (2009)
- Q. Nquyen., "Realizing S-Reliability for Services via Recovery-driven Intrusion Tolerance Mechanism", International conference on dependable systems and networks workshops (2010)
- Rodrigo N. Calheiros, "CloudSim: a toolkit for modeling and simulation of cloud computing environments and evaluation of resource provisioning algorithms", SOFTWARE – PRACTICE AND EXPERIENCE Softw. Pract. Exper, pp.23~50 (2011)
- "Internet Security Threat Report 2015" (2015)[URL]
- Wang, Dazhi, "Security analysis of SITAR intrusion tolerance system", Proceedings of the 2003 ACM workshop on Survivable and self-regenerative systems: in association with 10th ACM Conference on Computer and Communications Security (2003)
- Y. Huang, "Closing cluster attack windows through server redundancy and rotations", Proc of the sixth intl sysmp on Cluster Computing and the Grid Workshops (2006)