Duo: Software Defined Intrusion Tolerant System Using Dual Cluster
Joint Authors
Lee, Yongjae
Lee, Seunghyeon
Seo, Hyunmin
Yoon, Changhoon
Shin, Seungwon
Yoon, Hyunsoo
Source
Security and Communication Networks
Issue
Vol. 2018, Issue 2018 (31 Dec. 2018), pp.1-13, 13 p.
Publisher
Hindawi Publishing Corporation
Publication Date
2018-01-21
Country of Publication
Egypt
No. of Pages
13
Main Subjects
Information Technology and Computer Science
Abstract EN
An intrusion tolerant system (ITS) is a network security system that is composed of redundant virtual servers that are online only in a short time window, called exposure time.
The servers are periodically recovered to their clean state, and any infected servers are refreshed again, so attackers have insufficient time to succeed in breaking into the servers.
However, there is a conflicting interest in determining exposure time, short for security and long for performance.
In other words, the short exposure time can increase security but requires more servers to run in order to process requests in a timely manner.
In this paper, we propose Duo, an ITS incorporated in SDN, which can reduce exposure time without consuming computing resources.
In Duo, there are two types of servers: some servers with long exposure time (White server) and others with short exposure time (Gray server).
Then, Duo classifies traffic into benign and suspicious with the help of SDN/NFV technology that also allows dynamically forwarding the classified traffic to White and Gray servers, respectively, based on the classification result.
By reducing exposure time of a set of servers, Duo can decrease exposure time on average.
We have implemented the prototype of Duo and evaluated its performance in a realistic environment.
American Psychological Association (APA)
Lee, Yongjae& Lee, Seunghyeon& Seo, Hyunmin& Yoon, Changhoon& Shin, Seungwon& Yoon, Hyunsoo. 2018. Duo: Software Defined Intrusion Tolerant System Using Dual Cluster. Security and Communication Networks،Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1214306
Modern Language Association (MLA)
Lee, Yongjae…[et al.]. Duo: Software Defined Intrusion Tolerant System Using Dual Cluster. Security and Communication Networks No. 2018 (2018), pp.1-13.
https://search.emarefa.net/detail/BIM-1214306
American Medical Association (AMA)
Lee, Yongjae& Lee, Seunghyeon& Seo, Hyunmin& Yoon, Changhoon& Shin, Seungwon& Yoon, Hyunsoo. Duo: Software Defined Intrusion Tolerant System Using Dual Cluster. Security and Communication Networks. 2018. Vol. 2018, no. 2018, pp.1-13.
https://search.emarefa.net/detail/BIM-1214306
Data Type
Journal Articles
Language
English
Notes
Includes bibliographical references
Record ID
BIM-1214306