Dynamic and heterogeneous Byzantine system in cloud

Yang CHEN; Hongchao HU; Wenyan LIU; Shumin HUO; Hao LIANG

doi:10.11959/j.issn.2096-109x.2018036

您当前的位置：

首页 >

文章列表页 >

Dynamic and heterogeneous Byzantine system in cloud

Papers | 更新时间：2024-06-03

- Dynamic and heterogeneous Byzantine system in cloud
- Chinese Journal of Network and Information Security Vol. 4, Issue 5, Pages: 1-9(2018)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2018036
  CLC： TP302.8
- Online First：2018-05，
  
  Published：15 May 2018
- 稿件说明：
移动端阅览
Yang CHEN, Hongchao HU, Wenyan LIU, et al. Dynamic and heterogeneous Byzantine system in cloud[J]. Chinese Journal of Network and Information Security, 2018, 4(5): 1-9.
DOI：

Yang CHEN, Hongchao HU, Wenyan LIU, et al. Dynamic and heterogeneous Byzantine system in cloud[J]. Chinese Journal of Network and Information Security, 2018, 4(5): 1-9. DOI： 10.11959/j.issn.2096-109x.2018036.

摘要

拜占庭系统被广泛应用于提高云平台的入侵容忍能力。但现阶段的拜占庭系统难以有效防御一种潜伏式攻击，即攻击者通过累积控制个数超过容忍上限的执行体来破坏拜占庭系统。针对此问题提出云环境下具有动态异构性质的拜占庭系统，即将拜占庭系统中的执行体进行最大化多样性配置，同时利用系统漏洞和攻击技能水平来衡量执行体生命周期，将执行体进行动态轮换。仿真结果表明，提出的动态异构拜占庭系统能有效提升系统安全性。

Abstract

In order to improve the intrusion tolerance performance of cloud platforms

the Byzantine system model has been widely used.But the current Byzantine system is difficult to prevent a latent attack effectively

which can destroy the Byzantine system by accumulating the number of executive modules which the attacker controls and making it exceed the tolerance upper limit.To solve the problem

a dynamic and heterogeneous Byzantine system was proposed.In which the executive modules were maximized diversified in configurations such as different operating systems and so on.Meanwhile

every executive module was assigned a lifetime based on the attacker’s ability and the vulnerabilities of the module.The novel system can significantly enhance the intrusion tolerance of the cloud service by diverse and dynamic attack surface

which is verified by simulations.

关键词

Keywords

references

王秀苹 . 云计算下基于拜占庭算法的容忍入侵技术研究 [D ] . 包头:内蒙古科技大学 , 2012 .

WANG X P . Research on intrusion tolerance based on Byzantine algorithm in c1oud computing [D ] . Baotou:Inner Mongolia University of Science and Technology , 2012 .

ZHANG Y , ZHENG Z , LYU M R . BFTCloud:a Byzantine fault tolerance framework for voluntary-resource cloud computing [C ] // International Conference on Cloud Computing . 2011 : 444 - 451 .

ALZAIN M A , SOH B , PARDEDE E . A Byzantine fault tolerance model for a multi-cloud computing [C ] // International Conference on Computational Science and Engineering . 2013 : 130 - 137 .

KAPITZA R , BEHL J , CACHIN C , et al . CheapBFT:resourceefficient Byzantine fault tolerance [J ] . IEEE Transactions on Computers , 2016 , 65 ( 9 ): 2807 - 2819 .

MERIDETH M G , IYENGAR A , MIKALSEN T , et al . Thema:Byzantine-fault-tolerant middleware for Web-service applications [C ] // IEEE Symposium on Reliable Distributed Systems . 2005 : 131 - 142 .

ZHAO W , . BFT-WS:A Byzantine fault tolerance framework for Web services [C ] // Eleventh International IEEE Edoc Conference Workshop . 2007 : 89 - 96 .

PALLEMULLE S L , THORVALDSSON H D , GOLDMAN K J . Byzantine fault-tolerant Web services for n-tier and service oriented architectures [C ] // The International Conference on Distributed Computing Systems . 2008 : 260 - 268 .

PENG W , LI F , HUANG C T , et al . A moving-target defense strategy for cloud-based services with heterogeneous and dynamic attack surfaces [C ] // IEEE International Conference on Communications . 2014 : 804 - 809 .

仝青 , 张铮 , 张为华 , 等 . 拟态防御 Web 服务器设计与实现 [J ] . 软件学报 , 2017 , 28 ( 4 ): 883 - 897 .

TONG Q , ZHANG Z , ZHANG W H , et al . The design and implementation of mimic defense Web server [J ] . Journal of Software , 2017 , 28 ( 4 ): 883 - 897 .

LEINSTER T , COBBOLD C A . Measuring diversity:the importance of species similarity [J ] . Ecology , 2012 , 93 ( 3 ): 477 .

ZHANG M , WANG L , JAJODIA S , et al . Network diversity:a security metric for evaluating the resilience of networks against zero-day attacks [J ] . IEEE Transactions on Information Forensics ＆Security , 2016 , 11 ( 5 ): 1071 - 1086 .

MCQUEEN M A , BOYER W F , FLYNN M A , et al . Time-tocompromise model for cyber risk reduction estimation [M ] // Quality of Protection . Berlin : Springer , 2006 : 49 - 64 .

Views

1471

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Qualitative modeling and analysis of attack surface for process multi-variant execution software system

Risk assessment method for network attack surface based on Bayesian attack graph

Related Author

Fukang XING

Zheng ZHANG

Ran SUI

Sheng QU

Xinsheng JI

Yuyang ZHOU

Guang CHENG

Chunsheng GUO

Related Institution

Information Engineering University

Information Center of Logistics Support Department of Central Military Commission

School of Cyber Science and Technology, Southeast University

School of Computer Science and Engineering,Southeast University

Key Laboratory of Computer Network and Information Integration of Ministry of Education (Southeast University)

⁰