Lancaster EPrints

A Semi-autonomic Framework for Intrusion Tolerance in Heterogeneous Networks

D'Antonio, Salvatore and Romano, Simon and Simpson, Steven and Smith, Paul and Hutchison, David (2008) A Semi-autonomic Framework for Intrusion Tolerance in Heterogeneous Networks. In: Self-Organizing Systems. Lecture Notes in Computer Science . Springer, Berlin, pp. 230-241. ISBN 978-3-540-92156-1

Full text not available from this repository.

Abstract

A suitable strategy for network intrusion tolerance—detecting intrusions and remedying them—depends on aspects of the domain being protected, such as the kinds of intrusion faced, the resources available for monitoring and remediation, and the level at which automated remediation can be carried out. The decision to remediate autonomically will have to consider the relative costs of performing a potentially disruptive remedy in the wrong circumstances and leaving it up to a slow, but more accurate, human operator. Autonomic remediation also needs to be withdrawn at some point â a phase of recovery to the normal network state. In this paper, we present a framework for deploying domain-adaptable intrusion-tolerance strategies in heterogeneous networks. Functionality is divided into that which is fixed by the domain and that which should adapt, in order to cope with heterogeneity. The interactions between detection and remediation are considered in order to make a stable recovery decision. We also present a model for combining diverse sources of monitoring to improve accurate decision making, an important pre-requisite to automated remediation.

Item Type: Contribution in Book/Report/Proceedings
Uncontrolled Keywords: network resilience ; intersection project
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Departments: Faculty of Science and Technology > School of Computing & Communications
ID Code: 50382
Deposited By: ep_importer_pure
Deposited On: 13 Oct 2011 15:36
Refereed?: No
Published?: Published
Last Modified: 22 Oct 2017 03:12
Identification Number:
URI: http://eprints.lancs.ac.uk/id/eprint/50382

Actions (login required)

View Item