| Intelligent Distributed Computing Department |
| Distributed Systems Technology Group Papers |
|
|
|
|
Adaptive Use of Network-Centric Mechanisms in Cyber-Defense
Citation: Michael Atighetchi, Partha Pal, Franklin Webber, Chris Jones. The 6th IEEE International Symposium on Object-oriented Real-time Distributed Computing, May 14-16, 2003, Hakodate, Hokkaido, Japan
Formats: PDF Powerpoint (sound) Powerpoint (no sound)
Abstract Attacks against distributed systems frequently start at the network layer by gathering network related information (such as open TCP ports) and continue on by exhausting re-sources, or abusing protocols. Defending against network-based attacks is a major focus area in the APOD (Application That Participate in Their Own Defense) project, which set out to develop technologies that increase an application’s resilience against cyber attacks. This paper gives an overview of APOD’s current set of network-level defenses. Specific network-based defense mechanisms are described first, followed by a discussion on how to use them in local defensive behavior. Defense strategies, which specify coordinated defensive behavior across a distributed system, are discussed next, followed by results from initial experimental evaluation.
