Detail

Increasing Security Through Intrusion Tolerance

Computer systems are being used in many essential tasks, including
transport management, electricity distribution, and home banking. In
this talk, we describe how a service can be constructed in order to
automatically tolerate intrusions. In other words, even if a subset of
the system is successfully penetrated/controlled by an adversary, the
rest is able to continue to provide useful and correct results to the
users. The talk will address a few solutions to achieve intrusion
tolerance, and discus some of their limitations. Namely, it will
describe wormhole- and randomization-based approaches, and introduce
proactive resilience to avoid resource exhaustion.