자가치유 메커니즘을 활용한 침입감내시스템의 취약성 분석 = A Vulnerability Analysis of Intrusion Tolerance Systemusing Self-healing Mechanism

다국어 초록 (Multilingual Abstract)

of the most important core technologies required for the design of the ITS(Intrusion Tolerance System) that performs continuously minimal essential services even when the network-based computer system is partially compromised because of the external or internal intrusions is the quantitative dependability analysis of the ITS. In this paper, we applied self-healing mechanism, the core technology of autonomic computing to secure the protection power of the ITS. We analyzed a state transition diagram of the ITS composed of a primary server and a backup server utilizing two factors of self-healing mechanism (fault model and system response) and calculated the availability of ITS through simulation experiments and also performed studies on two cases of vulnerability attack.

국문 초록 (Abstract)

기반 컴퓨터 시스템이 외부 침입이나 혹은 내부 침입에 의해 부분적으로 손상(Partially Compromised)이 되더라도 최소한의 필수 서비스를 지속적으로 제공할 수 있게 해주는 침입감내시스템(Intrusion Tolerance System) 설계에 요구되는 중요한 요소 기술 중의 하나는 컴퓨터 시스템의 정량적 신인도(Dependability) 분석이라 할 수 있다. 본 논문에서는 침입감내시스템의 방어능력을 확보하기 위해 자율컴퓨팅(Autonomic Computing)의 핵심 기술인 자가 치유(Self-healing) 메커니즘을 적용하였다. 주 서버와 보조서버로 구성된 침입감내시스템의 상태천이(State Transition)를 자가치유 메커니즘의 두 가지 요소(결함모델 및 시스템반응)를 활용하여분석하였으며, 시뮬레이션 실험을 통해 침입감내시스템의 가용도(Availability)를 계산한 후, 두 가지 경우의 취약성(Vulnerability) 공격에 대한 사례 연구를 진행하였다.

참고문헌 (Reference)

1 "The Vision of Autonomic Computing" 36 no. 2 : 41-50, 2003.

2 "The Design of an Adaptive Intrusion Tolerant Database System" 2128-, 2002.06

3 "SecurityAnalysis of SITAR Intrusion Tolerance System" 23-32, oct.2003.

4 "Security in an Autonomic Computing Environment" 42 (42): 107-118, 2003

5 "SITAR: A Scalable Intrusion- Tolerant Architecture for Distributed Services" 359-367, 2003.

6 "Providing Intrusion Tolerance with ITUA" 5153-, 2002.06

7 "Probability and Statistics with Reliability Queueing and Computer Science Applications" John Wiley & Sons, Inc 472-, 2002.

8 "On-line Intrusion Detection Attack Prevention Using Diversity Generate-and- Test, andGeneralization" 335-342, 2003

9 "Modeling andQuantification of Security Attributes of SoftwareSystems" 505-514, 2002.06

10 "Fundamental concepts of dependability" 7-12, 2000.

11 "Enabling Automatic Adaptation in Systems with Under- Specified Elements" 55-60, nov.2002.

12 "Elements of the Self-Healing System Problem Space" 31-36, 2003

13 "Design and Implementation of SITAR Architecture Proceedings of Intrusion Tolerant System Workshop Supplemental Volume on International Conference on Dependable System & Networks"

14 "Comprehensive Survivability for Large-Scale Distributed Applications Department of Computer Science University of Colorado" 2001.

15 "Classification of the Intrusion Tolerant Systems and Integrated Framework for Survivability Enhancement" 10c (10c): 295-304, 2003.

16 "Characterizing Intrusion Tolerant Systems using a State Transition Model" 2 : 211-221, 2001.06

17 "Analysis ofTechniques for Building Intrusion Tolerant Server Systems" 729-734, 2003.

18 "A Framework for Scalable Analysis and Design of System-Wide Graceful degradation in distributed Embedded Systems" 156-163, jan.2003.