• DocumentCode
    428752
  • Title

    Building a distributed security defence system

  • Author

    Daskapan, S. ; Vree, W.G. ; Sol, H.G.

  • Author_Institution
    Delft Univ. of Technol., Netherlands
  • Volume
    5
  • fYear
    2004
  • fDate
    10-13 Oct. 2004
  • Firstpage
    4064
  • Abstract
    Given the complexity of infrastructures, current state of security technology and the limited budgets any security defense systems can be outnumbered by a sufficient number of random sequential failures, e.g. due to multiple DOS attacks. Complementary to the regular solutions where per node several identical dedicated nodes are added (i.e. redundants), a resource sharing approach between undedicated nodes is aimed to build a large scale cluster of redundants and approximate perpetual availability of security distributing nodes. In this work principles are acquired from related and unrelated fields to build a distributed defense system (DDS) that relies on resource sharing. The proposed protocol set, called Medusa, achieves this DDS by dissociating trust authority from identity and hardware, making trust a moveable emancipated commodity. As a moveable object trust can apply traditional fault tolerance techniques by process migration.
  • Keywords
    authorisation; fault tolerant computing; mobile agents; redundancy; distributed security defence system; fault tolerance techniques; infrastructures complexity; mobile agent; process migration; protocol set; random sequential failures; resource sharing approach; security distributing nodes; Authentication; Computer crime; Fault tolerant systems; Hardware; Immune system; Large-scale systems; Protocols; Redundancy; Resource management; Security;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Systems, Man and Cybernetics, 2004 IEEE International Conference on
  • ISSN
    1062-922X
  • Print_ISBN
    0-7803-8566-7
  • Type

    conf

  • DOI
    10.1109/ICSMC.2004.1401167
  • Filename
    1401167