Proactive Resilience Revisited: The Delicate Balance Between Resisting Intrusions and Remaining Available

Paulo Sousa, Nuno Ferreira Neves, Paulo VerĂ­ssimo, William H. Sanders

In Proceedings of the 25th IEEE Symposium on Reliable Distributed Systems (SRDS), Leeds, UK, pages 71-80, October 2006.


Abstract

In a recent paper, we presented proactive resilience as a new approach to proactive recovery, based on architectural hybridization. We showed that, with appropriate assumptions about fault rate, proactive resilience makes it possible to build distributed intrusion-tolerant systems guaranteed not to suffer more than the assumed number of faults during their lifetime. In this paper, we explore the impact of these assumptions in asynchronous systems, and derive conditions that should be met by practical systems in order to guarantee long-lived, i.e., available, intrusion-tolerant operation. Our conclusions are based on analytical and simulation results as implemented in Möbius, and we use the same modeling environment to show that our approach offers higher resilience in comparison with other proactive intrusion-tolerant system models.
 


BibTeX

@InProceedings{sousa06proactiverevisited,
    author = "Paulo Sousa and Nuno Ferreira Neves and Paulo Ver\'{\i}ssimo and William H. Sanders",
    title = "Proactive Resilience Revisited: The Delicate Balance Between Resisting Intrusions and Remaining Available",
    booktitle = "Proceedings of the 25th IEEE Symposium on Reliable Distributed Systems (SRDS)",
    year = "2006",
    pages = "71-80",
    month = oct
}


Extended Version

Download the pdf.