Dependable Intrusion Tolerance

  • View
    28

  • Download
    1

Embed Size (px)

DESCRIPTION

Dependable Intrusion Tolerance. March 2002 Magnus Almgren, Alfonso Valdes SRI International. Acknowledgements - PowerPoint PPT Presentation

Text of Dependable Intrusion Tolerance

  • Dependable Intrusion ToleranceMarch 2002 Magnus Almgren, Alfonso ValdesSRI InternationalAcknowledgementsResearch sponsored under DARPA Contract N66001-00-C-8058. Views presented are those of the authors and do not represent the views of DARPA or the Space and Naval Warfare Systems Center

  • OutlineBackgroundSystem ComponentsThe Single ProxyExampleValidationPerformanceStopping Code RedFuture Work

  • BackgroundIntrusion Tolerant Server

  • BackgroundIntrusion Tolerant ServerRedundancy & Diversity

  • BackgroundIntrusion Tolerant ServerRedundancy & DiversityHardened ProxyStackGuardOnline VerifiersSmall Code Base

  • BackgroundIntrusion Tolerant ServerRedundancy & DiversityHardened ProxyStackGuardOnline VerifiersSmall Code BaseHIDS/NIDS/app-IDSEMERALD/Snort

  • System ComponentsApplication ServersSolaris, Win2k, RedHat, FreeBSDIDSProxyRedHat-6.2Our own code baseMS Win2kIISSolaris 8 (Sparc5)ApacheeXpert-BSMRedHat 7.1iPlanetFreeBSD 4.2Apache

    App-IDSeXpert-NeteBayes-TCPeBayes-BlueSnortRedHat 6.2ProxyeAggregatorC-R

  • Proxy in Detail

  • Simple Example1,12,23,34,44,3Policy/Regime

  • Simple Examplee-AggregatorChallenge Response1,12,23,34,44,3Policy/Regime

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerAlert Manager1,12,23,34,44,3Policy/Regime

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerAlert Manager1,12,23,34,44,3Policy/Regime

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Policy/RegimeRegime Manager

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Policy/RegimeRegime Manager

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Policy/RegimeRegime Manager

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Policy/RegimeRegime Manager

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Policy/RegimeRegime Manager

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Policy/RegimeRegime Manager

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Regime ManagerPolicy/RegimeBlock clientBlock URI

  • Simple Examplee-AggregatorChallenge ResponseRepair ManagerProxy ServerAlert Manager1,12,23,34,44,3Regime ManagerPolicy/Regime

  • Plans for ValidationPerformancePreliminary ResultsResistance to attacksCompile a list of existing Web exploitsRun these against systemProblem: A very new attack, which we might not have thought aboutAssembly of Complementary MechanismsRed Teaming?

  • Performance MeasurementRound-trip time measured through the proxyRegime 1 4Round-trip time measured directly for each application serverAsking for index.html with all included images and measured round-trip time. About 34 kb in 9 requests.

  • Round-trip time10 simultaneous clients

    Chart1

    1800250900220350

    1800250900220500

    1800250900220545

    1800250900220660

    bobcat

    cheetah

    hunter

    tiger

    proxy

    Sheet1

    bobcatcheetahhuntertiger1.12.23.24.2

    17875936217139179102

    17760913012750218226

    1802892404972150111

    182491151180158162

    181209166188162163

    178469038494298122

    182239037577243145

    1782990233311041149

    18218911084910377

    180179054954955133

    17929904370894496

    179589027281024465

    18223903784032114

    17917906805726145

    181179072938154198

    181579030265117976

    179790234022116113

    18143901770115787

    179169023703846139

    1801990457723111180

    181559022643938130

    18185905763284278

    1802090235212119107

    1801290316331113120

    180509043873052135

    182209095567112135

    178549071620107157

    17916902538418989

    18314902257364867

    17914906108334296

    180219041821615100

    18014909242847101

    1792290722776369

    1812090543945105159

    180209047147858167

    1833390621152133121

    18016902340699580

    17838901336256745

    182589022154911264

    1788090451710725102

    18115902133887062

    18135902534185167

    17926458931463371139

    17846902314536688

    181299022679372119

    18030904767525429

    1828902540252695

    17913902730712198

    18062902729268270

    1808904537391488

    18139902822104277

    18017903410916444

    18031905115416064

    180319030131028731

    1823990632377319

    179269058579626

    1808904114125932

    18110905176510732

    17916901680265533

    1833690612674842

    17918901821333669

    17947903844606953

    182790532255644

    17953901351805430

    1811690633211110329

    18011901868927349

    18035906301073539

    18023902967689137

    180349022345610753

    18373902483453950

    17719902347304568

    181729029791083640

    181690737722958

    17913903236482542

    1807904417482528

    18132902016512139

    1807903058366935

    18015901917263929

    18122901558283823

    1803790838225633

    18152902262456038

    17931901438313944

    18015903076723384

    1793590551312465

    18042902383594545

    1813945891022161655

    1782890431193533

    1832990818351639

    17829901526105353

    18022901056176226

    18159902745802632

    18026901722634433

    18016901815235727

    18125901722132525

    1796902220832320

    182199077682639

    18113901813704722

    1762590228471213

    1771890713321511

    18259098923115

    17940913311618411778

    177339213117118178143

    1802992324137132139

    18099233401511078

    17741891721144793

    179389026225374100

    179269025474818992

    1771890182150152138

    1801390191811056133

    178399025126949114

    1801290970938799

    18012901653456780

    180359010286864109

    180119018523292114

    179289041131098178

    1803990646395551

    181259023348049117

    18065903728919349

    1816990101374311068

    180379035306773109

    18018902538424735

    18014902642569263

    18232902929477678

    1795890202174183127

    18037906237092138

    18156906183097194

    177239023462088183

    17917902349526421

    180449013462111164

    18289904421279757

    1781590734516572

    183179029546968128

    178169021545074121

    1822890114015867113

    179219119617389110

    17632932963582895

    181169346535988109

    1782691629904519

    18270926333911187

    17934901664122988

    180209027128129672

    18137902640578867

    1805745892712344591

    18219904254416899

    1784890652232969

    18038903741628078

    179149031631211269

    17953905384013261

    1817903447618536

    17929902298395144

    1784790192461140158

    18058906291055242

    18140901614245272

    180359024315580131

    18111902291442355

    1805090633127681

    18048901052193671

    18038905044455473

    181299020252710499

    179159028356797132

    1804590843427771

    18130904021488172

    1822290621476949

    178379014436410737

    180199024871115658

    1812690998854129

    180749014591122834

    1802190641871449

    18015902223324543

    18326905018663237

    18018903022452288

    178299023116816280

    18126901771758647

    180309084661096244

    1804490738196948

    18050903811774564

    18028902268812248

    18030903794282284

    18128901622762775

    1794090489851446

    18020904218141821

    1822790646292241

    1799906109511832

    18210904323282538

    17737901086361537

    1812945891023841231

    1803090826643523

    1806902632163726

    1808906115455026

    18024902713272147

    1815905910503336

    18012907101011652

    18026901116792969

    1814903514581459

    1801490369521845

    18115903616292060

    179490136464165

    1814902511391270

    18069014637954

    180490227271127

    1803693231539916077

    1774190358878150122

    1824793183845163138

    17927913663909295

    17720914324293590

    183459025141258121

    178359020112866143

    1804590634103179113

    1791990188095123122

    1802390291038866102

    17913901630233361

    17927901219869777

    1784590518623689

    17812902126483491

    178449093015111111

    180229018121012955

    180449051183912285

    18089024464199123

    180119023996146166

    18231902116255227

    18029903234157174

    179559030136318175

    18012190298065115151

    1802390361008073204

    18119904234164116222

    1801790188727114151

    18312902114734853

    1794190691249297

    1821090175819841114

    1771690293711777111

    18015903727854090

    178149031644569112

    18015904968749869

    182179014561980116

    180269221641023361

    1791993669768249

    18016909132815964

    181239041911013898

    17819902119527241

    1801590694913663

    17925907840296599

    18111902438259076

    1791045894354495082

    18228908184047134

    18110901853474999

    17821902644465451

    182289051310385111

    1794390147818311372

    180529024982710491

    1815490311350125153

    1794290246711176115

    1834090729225194

    17899031644743106

    181119024422016966

    1821990265637125118

    17738902511638554

    17830901941135048

    178319024491015840

    182379011101157030

    18032902211213240

    17710902312325156

    180169024221082840

    181489011537411042

    1794190749755038

    18125905395534642

    17935903127349323

    17933902436649837

    17922903615436571