A Novel Intrusion Tolerant System Using Live Migration

Abstract

SUMMARYThis letter proposes a novel intrusion tolerant system consisting of several virtual machines (VMs) that refresh the target system periodically and by live migration, which monitors the many features of the VMs to identify and replace exhausted VMs. The proposed scheme provides adequate performance and dependability against denial of service (DoS) attacks. To show its efficiency and security, we conduct experiments on the CSIM20 simulator, which showed 22% improvement in a normal situation and approximately 77.83% improvement in heavy traffic in terms of the response time compared to that reported in the literature. We measure and compare the response time. The result show that the proposed scheme has shorter response time and maintains than other systems and supports services during the heavy traffic. key words: intrusion tolerant system (ITS), proactive & reactive recovery, live migration, denial of service (DoS)

Hybrid Recovery-Based Intrusion Tolerant System for Practical Cyber-Defense

“…Recent studies [20], [23], [27] found that proactive recovery had an inherent limitation by periodical recovery. Even if proactive recovery can eliminate some unknown attacks like zero-day attacks periodically [28], stealth resource exhaustion attacks like an application-layer DDoS directly causes the performance degradation, and they cannot be tolerated easily by existing proactive recovery or reactive recovery which use the signature based intrusion detection.…”