Title:
INTRUSION TOLERANT SERVER SYSTEM
Document Type and Number:
WIPO Patent Application WO2002102010
Kind Code:
A3
Abstract:
The invention relates to a reconfigurable scalable intrusion-tolerant network that is interposed between a service requesting client and a protected server to minimize the impact of intrusive events. The apparatus may include a proxy server for receiving the requests from a client and forwarding them to a protected server. Acceptance monitors receive the response from a protected server and apply one or more acceptance tests. A ballot monitor receives the result of the acceptance tests and determines a response to the client. The network may also include an intrusion sensor to detect threats to the network and a reconfigurer to alter the network forwarding scheme. Reconfiguration may include isolating network elements, creating parallel paths, implementing redundant operations, or assessing the validity of responses.
More Like This:
Inventors:
GONG FENGMIN (US)
SARGOR CHANDRAMOULI (US)
WANG FEIYI (US)
SARGOR CHANDRAMOULI (US)
WANG FEIYI (US)
Application Number:
PCT/US2002/016515
Publication Date:
April 17, 2003
Filing Date:
May 24, 2002
Export Citation:
Assignee:
MCNC (US)
GONG FENGMIN (US)
SARGOR CHANDRAMOULI (US)
WANG FEIYI (US)
GONG FENGMIN (US)
SARGOR CHANDRAMOULI (US)
WANG FEIYI (US)
International Classes:
H04L29/06; (IPC1-7): H04L29/06
Other References:
FEIYI WANG ET AL.: "SITAR: A Scalable Intrusion-Tolerant Architecture for Distributed Services", PROCEEDINGS OF THE 2001 IEEE WORKSHOP ON INFORMATION ASSURANCE AND SECURITY; UNITED STATES MILITARY ACADEMY, 5 June 2001 (2001-06-05) - 6 June 2001 (2001-06-06), west point, pages 38 - 45, XP002225683, Retrieved from the Internet [retrieved on 20021219]
Download PDF: