Towards Detecting the Interaction Vulnerabilities in Large Distributed System

In this paper, we proposed a novel approach, called LDS-IVD, to model the entity interaction vulnerabilities in Large Distributed System (LDS) which results from the absence of necessary security mechanisms. LDS-IVD constructs a general interaction security mechanism description language, named with IS-LAN. By analyzing the key resources in LDS with the finite state machine, IS-LAN provides the capability of discovering and validating the entity interaction vulnerabilities. In this way, IDS-IVD can find out the negative influence on the resource confidentiality, integrity and availability incurred by the deficiency of security mechanisms, and can detect the interaction vulnerabilities along with the attack patterns.