100 likes | 219 Vues
This paper discusses the concept of survivability in network computing systems, defining it as the ability to maintain essential services during attacks and failures while recovering promptly. It draws analogies with weeds and viruses to explore resilience in technology. The discussion covers various relevant topics, including fault tolerance, cryptographic techniques, and intrusion detection. Additionally, the paper reviews the author's work on survivability projects, such as mediated encryption and dynamic key management, offering insights into innovative strategies to enhance system robustness in the face of adversity.
E N D
SurvivabilityPanel Gene Tsudik gts@ics.uci.edu UC Irvine http://sconce.ics.uci.edu WITS'2002 Survivability Panel
What it is… • Survivability is the ability of a network computing system to provide essential services in the presence of attacks and failures, and recoverfull services in a timely manner. Or: • the ability of a system to continue to fulfill its mission in the presence of attacks, accidents, or failures (see CERT, http://www.cert.org/nav/index_purple.html and ISW’2000 CFP, respectively) WITS'2002 Survivability Panel
Resilient, ubiquitous, impossible-to-get-rid-of Garden WEED What it is… (imho) But, when I think of Survivability what comes to mind is WITS'2002 Survivability Panel
Well-written, stealthy, impossible-to-get-rid-of computer VIRUS What it is… (imho) Or, better yet: WITS'2002 Survivability Panel
So: • Q: Can we learn from weeds? • A: Probably; look out for papers drawing useful analogies and proposing to mimic weed DNA… • E.g., tumbleweed --- a mobile • weed! Alas, mobile only after death! WITS'2002 Survivability Panel
So: • Q: Can we learn from viruses? • A: I think so. • Caveat: we might not like what we learn… WITS'2002 Survivability Panel
What it is… (imho) What also comes to mind is: DARPA-speak (buzzword) Probably invented by some well-meaning study group WITS'2002 Survivability Panel
Seriously: • Survivability research is (likely) an attempt to unify: • Fault-tolerance in distributed systems (e.g., byzantine robustness, consensus) • Cryptographic techniques (e.g., threshold, proactive crypto) • Intrusion detection/response technology WITS'2002 Survivability Panel
Survivability and I Projects: • SUCSES: mediated encryption/signatures technology; fast revocation • CLIQUES, CLIQUES II: key management for dynamic peer groups • IMAHN: reliable broadcast in high-speed MANETs WITS'2002 Survivability Panel
Survivability and I • Multi-round protocols • N-party protocols (N>2) E.g., DPG key management must be “survivable” (handle arbitrary nested membership events) • RAMPART • CLIQUES • ENSEMBLE KM WITS'2002 Survivability Panel