A high-availability clustering architecture with data integrity guarantees

Rabbat, R.; McNeal, T.; Burke, Tom

doi:10.1109/clustr.2001.959974

Cited by 18 publications

(9 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Simple forms of server rotations have previously been employed in high-availability systems, where backup servers rotate online to ensure uninterrupted service in face of primary server failures [15,16,17,18]. SCIT systems share many design challenges with high-availability systems, such as the seamless server transitions and sharing of server identities (IP and/or hardware addresses).…”

Section: Performance Studiesmentioning

confidence: 99%

Closing cluster attack windows through server redundancy and rotations

Huang

Arsenault

Sood

2006

Sixth IEEE International Symposium on Cluster Computing and the Grid (CCGRID'06)

View full text Add to dashboard Cite

It is well-understood that increasing redundancy in a system generally improves the availability and dependability of the system. In server clusters, one important form of redundancy is spare servers. Cluster security, while universally recognized as an important subject in its own right, has not often been associated with the issue of redundancy.In prior work, we developed a Self-Cleansing Intrusion Tolerance (SCIT) architecture that strengthens cluster security through periodic server rotations and self-cleansing. In this work, 1 we consider the servers in the cleansing mode as redundant, spare hardware and develop a unified control algorithm that manages the requirements of both security and service availability. We will show the advantages of our algorithm in the following areas: (1) Intrusion tolerance through constant server rotations and cleansing, (2) Survivability in events of server failures, (3) Guarantee of service availability as long as the cluster has a minimum number of functioning servers, and (4) Scalability, the support of using high degrees of hardware/server redundancy to improve security and fault tolerance. We provide proofs for important properties of the proposed algorithm. The effects of varying degrees of server redundancy in reducing attack windows are investigated through simulation.

show abstract

Section: Performance Studiesmentioning

confidence: 99%

Closing cluster attack windows through server redundancy and rotations

Huang

Arsenault

Sood

2006

Sixth IEEE International Symposium on Cluster Computing and the Grid (CCGRID'06)

View full text Add to dashboard Cite

show abstract

“…Certain forms of server rotation have been proposed by Blackmon and Nguyen [2] and by Rabbat, et al [21] in an attempt to achieve high availability servers.…”

Section: Related Workmentioning

confidence: 99%

Creating a Cyber Moving Target for Critical Infrastructure Applications

Okhravi

Comella

Robinson

et al. 2011

Critical Infrastructure Protection V

View full text Add to dashboard Cite

Despite the significant amount of effort that often goes into securing critical infrastructure assets, many systems remain vulnerable to advanced, targeted cyber attacks. This paper describes the design and implementation of the Trusted Dynamic Logical Heterogeneity System (TALENT), a framework for live-migrating critical infrastructure applications across heterogeneous platforms. TALENT permits a running critical application to change its hardware platform and operating system, thus providing cyber survivability through platform diversity. TALENT uses containers (operating-system-level virtualization) and a portable checkpoint compiler to create a virtual execution environment and to migrate a running application across different platforms while preserving the state of the application (execution state, open files and network connections). TALENT is designed to support general applications written in the C programming language. By changing the platform on-the-fly, TALENT creates a cyber moving target and significantly raises the bar for a successful attack against a critical application. Experiments demonstrate that a complete migration can be completed within about one second.

show abstract

“…Simple forms of server rotations have previously been employed in high-availability systems, where backup servers rotate online to ensure uninterrupted service in face of primary server failures [12,13,15,16]. SCIT systems share many design challenges with high-availability systems, such as the seamless server transitions and sharing of server identities (IP and/or hardware addresses).…”

Section: For a Secondary Swap: Call Secondary-swap(c) For A Backend mentioning

confidence: 99%

Securing DNS services through system self cleansing and hardware enhancements

Huang

Arsenault

Sood

2006

First International Conference on Availability, Reliability and Security (ARES'06)

View full text Add to dashboard Cite

--Domain Name Systems (DNS) provide the mapping between easily-remembered host names and their IP addresses. Popular DNS implementations however contain vulnerabilities that are exploited by frequent, targeted attacks. The software vulnerabilities of DNS together with the constant innovation and morphing of cyber attack techniques necessitate the consideration of the worst case scenarios: there will be successful but undetected attacks against DNS servers.In this work 1 we develop a secure DNS architecture that contains the damage of successful, undetected attacks. This formidable end is achieved by constantly cleansing the servers and rotating the role of individual servers. Moreover, the server rotation process itself is protected against corruption by hardware. We will show the advantages of our design in the following areas: (1) protection of the DNS master file and cryptographic keys, (2) incorruptible intrusion tolerance, (3) high availability, and (4) scalability, the support of using of high degrees of hardware/server redundancy to improve both system security and service dependability. Due to the critical importance of DNS, such a dependable and intrusion-resilient design contributes significantly to the overall security of the Internet.

show abstract

A high-availability clustering architecture with data integrity guarantees

Cited by 18 publications

References 0 publications

Closing cluster attack windows through server redundancy and rotations

Closing cluster attack windows through server redundancy and rotations

Creating a Cyber Moving Target for Critical Infrastructure Applications

Securing DNS services through system self cleansing and hardware enhancements

Contact Info

Product

Resources

About