| 基于多版本冗余进程的容侵系统 |
| |
| 引用本文： | 陈林博,江建慧,张丹青,帅春燕.基于多版本冗余进程的容侵系统[J].清华大学学报(自然科学版),2011(Z1):1519-1526. |
| |
| 作者姓名： | 陈林博 江建慧 张丹青 帅春燕 |
| |
| 作者单位： | 同济大学计算机科学与技术系; |
| |
| 基金项目： | 国家“八六三”高技术项目(2007AA01Z142) |
| |
| 摘 要： | 针对利用多样性防御入侵和容忍入侵的典型方法的不足,提出了一种在操作系统的系统调用层上实现的多版本冗余进程的容侵系统。采用指令集随机化实现了多版本的冗余进程,并且利用冗余进程间系统调用的一致性,通过封装Linux内核中系统调用,实现了容侵系统的分发器、比较器。实验证明:该系统能有效地容忍针对恶意代码注入类型的入侵。
|
| 关 键 词： | 多样性 入侵容忍 多版本冗余进程 指令集随机化 系统调用封装 |
Intrusion tolerant system based on multi-version redundant processes |
| |
| CHEN Linbo,JIANG Jianhui,ZHANG Danqing,SHUAI Chunyan.Intrusion tolerant system based on multi-version redundant processes[J].Journal of Tsinghua University(Science and Technology),2011(Z1):1519-1526. |
| |
| Authors: | CHEN Linbo JIANG Jianhui ZHANG Danqing SHUAI Chunyan |
| |
| Institution: | CHEN Linbo,JIANG Jianhui,ZHANG Danqing,SHUAI Chunyan(Department of Computer Science and Technology,Tongji University,Shanghai 201804,China) |
| |
| Abstract: | Classical intrusion prevention systems using diversity and intrusion tolerant methods were analyzed to develop a new intrusion tolerant system based on multi-version redundant processes.The multi-version redundant processes are implemented using instruction set randomization.The consistency of system calls between redundant processes allows the comparator and dispatcher to be implemented by wrapping Linux system calls.Tests show that the intrusion tolerant system can effectively tolerate binary code injecti... |
| |
| Keywords: | diversity intrusion tolerance multi-version redundant processes instruction set randomization system call wrapper |
| 本文献已被 CNKI 等数据库收录！ |
