Collaborative Research: CT-T: Transparent Damage Quarantine and Recovery in Transactional Applications and Web Services

合作研究：CT-T：事务应用程序和 Web 服务中的透明损坏隔离和恢复

• 批准号: 0716479
• 负责人: Peng Liu
• 金额: $ 6.13万
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-15 至 2009-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716479&HistoricalAwards=false
• 关键词: Collaborative; Research; CT; Transparent; Damage

This project addresses transparent Damage Quarantine and Recovery (DQR), an important problem faced by a large number of mission/life/business-critical applications and information systems that must manage risk, business continuity, and assurance in the presence of severe cyber attacks. Today, these critical applications still have a ?good? chance to suffer from a big ?hit? from attacks. Due to data sharing, interdependencies, and interoperability, the hit could greatly ?amplify? its damage by causing catastrophic cascading effects, which may ?force? an application to halt for hours or even days before the application is recovered.Traditional failure recovery techniques, though mature in handling random failures, cannot solve the DQR problem due to several fundamental differences between failure recovery and attack recovery. DQR is not a new concept, but there is still a big gap in engineering practical DQR capabilities for real-world applications, and no prior DQR techniques address Web Services or Service-Oriented Architectures. In this project, we will take a holistic approach and make an integrated set of innovative contributions on four fundamental aspects of DQR: theories, mechanisms, applications, and systems. The proposed innovations include the first theory that integrates recoverability and quarantinability, the first DQR scheme that uses mark-based causality tracing to replace read-write-dependency analysis, a novel DQR scheme that does ?cleaning-free? recovery, and the first set of DQR theories and mechanisms for Web Services. In addition, complete open-source DQR tools and systems will be prototyped.

该项目解决了透明的损害隔离和恢复 (DQR)，这是大量任务/生命/业务关键型应用程序和信息系统面临的一个重要问题，这些应用程序和信息系统必须在出现严重网络攻击时管理风险、业务连续性和保证。如今，这些关键应用程序仍然具有“良好的性能”。有机会遭受重大打击吗？来自攻击。由于数据共享、相互依赖和互操作性，打击可能会大大“放大”。它的损害是通过造成灾难性的级联效应而造成的，这可能会“迫使”应用程序停止数小时甚至数天后才能恢复。传统的故障恢复技术虽然在处理随机故障方面已经成熟，但由于故障恢复和攻击恢复之间存在几个根本区别，无法解决DQR问题。 DQR 并不是一个新概念，但在为实际应用程序设计实用的 DQR 功能方面仍然存在很大差距，而且之前的 DQR 技术还没有解决 Web 服务或面向服务的体系结构。在这个项目中，我们将采取整体方法，在 DQR 的四个基本方面：理论、机制、应用和系统做出综合的创新贡献。所提出的创新包括第一个集成可恢复性和可隔离性的理论、第一个使用基于标记的因果关系追踪来代替读写依赖分析的 DQR 方案、一种“免清理”的新颖 DQR 方案。恢复，以及第一套用于Web服务的DQR理论和机制。此外，完整的开源 DQR 工具和系统也将进行原型设计。