Intrusion Tolerance for Networked Systems through Two-Level Feedback Control
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2024
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866907926340304896 |
|---|---|
| author | Hammar, Kim Stadler, Rolf |
| author_facet | Hammar, Kim Stadler, Rolf |
| contents | We formulate intrusion tolerance for a system with service replicas as a two-level optimal control problem. On the local level node controllers perform intrusion recovery, and on the global level a system controller manages the replication factor. The local and global control problems can be formulated as classical problems in operations research, namely, the machine replacement problem and the inventory replenishment problem. Based on this formulation, we design TOLERANCE, a novel control architecture for intrusion-tolerant systems. We prove that the optimal control strategies on both levels have threshold structure and design efficient algorithms for computing them. We implement and evaluate TOLERANCE in an emulation environment where we run 10 types of network intrusions. The results show that TOLERANCE can improve service availability and reduce operational cost compared with state-of-the-art intrusion-tolerant systems. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2404_01741 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Intrusion Tolerance for Networked Systems through Two-Level Feedback Control Hammar, Kim Stadler, Rolf Distributed, Parallel, and Cluster Computing Artificial Intelligence Cryptography and Security Computer Science and Game Theory Systems and Control We formulate intrusion tolerance for a system with service replicas as a two-level optimal control problem. On the local level node controllers perform intrusion recovery, and on the global level a system controller manages the replication factor. The local and global control problems can be formulated as classical problems in operations research, namely, the machine replacement problem and the inventory replenishment problem. Based on this formulation, we design TOLERANCE, a novel control architecture for intrusion-tolerant systems. We prove that the optimal control strategies on both levels have threshold structure and design efficient algorithms for computing them. We implement and evaluate TOLERANCE in an emulation environment where we run 10 types of network intrusions. The results show that TOLERANCE can improve service availability and reduce operational cost compared with state-of-the-art intrusion-tolerant systems. |
| title | Intrusion Tolerance for Networked Systems through Two-Level Feedback Control |
| topic | Distributed, Parallel, and Cluster Computing Artificial Intelligence Cryptography and Security Computer Science and Game Theory Systems and Control |
| url | https://arxiv.org/abs/2404.01741 |