능동형 노출시간 조정을 활용한 가상화 기반 침입감내시스템 설계
Design of an Efficient SCIT System through Exposure Time Mediation
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 활발히 연구되고 있는 가상화를 기반으로 한 침입감내시스템은 각 서버를 비교적 짧은 시간의 주기 간격으로재활성화 함으로써 공격자에게 시스템을 파악할 시간적인 기회를 허용하지 않는 것을 핵심으로 하고 있다. 그러나 매우 짧은 주기로 반복되는 재활성화 과정은 시스템의 한정된 자원을 고려했을 때 하드웨어 및 소프트웨어적으로 큰 부담을 안겨 주고 있다. 본 논문에서는 시스템이 상황에 따라 노출시간을 능동적으로 변화시킴으로써 재활성화를 통한보안성의 저하를 방지하는 범위에서 효율적으로 자원을 활용할 수 있는 개선된 침입감내시스템을 제안한다. 또한CSIM20 시뮬레이터를 이용하여 클러스터 크기가 고정된 기존 시스템에 비해, 효율성과 보안성 측면에서 향상된 결과를 입증하였다.
Abstract
prevent intruders from gaining enough time to fully analyze a system by periodically reactivating each server inshort cycles. However, considering the limited resources of the system, this process puts heavy pressure on boththe hardware and software of the system. In this paper, we propose an advanced intrusion tolerance system thatuses its resources in an efficient manner by actively changing its exposure time depending on the circumstanceswithin a range that does not compromise the security of the system. Using the CSIM20 simulator, we haveshown that the proposed system shows improved efficiency and security compared to prior systems with a fixedcluster size.
참고문헌 (11)
- Cyber Security: A Crisis of Prioritization, "PITAC", President's Information Technology Advisory Committee, ~ (2005)
- P. Verissimo, "Intrusion-tolerant architectures: Concepts and design", Architecting Dependable Systems, 2677, pp.3~36 (2003)
- Yih Huang, "Self-Cleansing Systems for Intrusion Containment", Proceedings of Workshop on Self-Healing, Adaptive, and Self-Managed Systems (SHAMAN) (2002)
- Yih Huang, "Closing Cluster Attack Windows Through Server Redundancy and Rotations", Proceedings of the Second International Workshop on Cluster Security (Cluster-Sec06), pp.12~21 (2006)
- Quyen Nguyen, "Quantitative Approach to Tuning of a Time-Based Intrusion-Tolerant System Architecture", 3rd Workshop on Recent Advances in Intrusion Tolerant Systems (2009)
- Anantha K. Bangalore, "Securing Web Servers Using Self Cleansing Intrusion Tolerance (SCIT)", Proc. The Second International Conference on Dependability (DEPEND 2009), pp.60~65 (2009)
- Jungmin Lim, "A novel Adaptive Cluster Transformation (ACT)-based intrusion tolerant architecture for hybrid information technology", JOURNAL OF SUPERCOMPUTING, 66(2), pp.918~935 (2013), SPRINGER
- Yongki Kim, "The design of adaptive intrusion tolerant system(ITS) based on historical data", Internet Technology And Secured Transactions, 2012 International Conferece, pp.662~667 (2012)
- H. Schwetman, "CSIM19: A Powerful Tool for Building System Models", Proc. of the 2001 Winter Simulation Conference, pp.250~255 (2001)
- Quyen Nguyen, "Realizing S-Reliability for Services via Recovery-driven Intrusion Tolerance Mechanism", 2010 International Conference on Dependable Systems and Networks Workshops(DSN-W), pp.176~181 (2010)