一种基于入侵容忍的可生存系统设计方案  

AN INTRUSION-TOLERANT BASED SCHEME FOR SURVIVABLE SYSTEM DESIGN

作　　者：鲁懿文[1] 张桂戌[1] 

机构地区：[1]华东师范大学计算机科学与技术系,上海200062

出　　处：《计算机应用与软件》2009年第1期41-43,共3页Computer Applications and Software

基　　金：国家重点基础研究发展规划(973)项目(2005CB321904)

摘　　要：与传统的防火墙和入侵检测技术不同,入侵容忍考虑的是在入侵不可避免的情况下系统的生存能力,因此更符合可生存系统的设计要求。提出一种基于入侵容忍技术的系统设计方案,利用容错技术保证系统关键服务的连续性。采用主动秘密共享技术取得了系统中关键数据的机密性和可用性的折衷,使得系统在攻击和故障已发生的情况下,具有较强的可生存性。Different from the traditional firewall and intrusion detection techniques,intrusion tolerance focuses on the survivability of system on condition that intrusion is somehow inevitable, thus preferably meeting the design requirements of the survivable system. A scheme based on intrusion tolerance for system design is proposed, which guarantees the continuity of key services by fault-tolerant techniques, and meanwhile, obtains the tradeoff between confidentiality and availability of key data by proactive secret sharing, so that the system can process high surviva- bility under attacks and faults.

关 键 词：入侵容忍 主动秘密共享 可生存性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311.13[自动化与计算机技术—计算机科学与技术]