容忍入侵的Web服务器系统设计

Design of an Intrusion-Tolerant Web Server System

文中提出一种可为 Web 服务器提供容忍入侵能力的开放式结构,通过自适应重配置、冗余和多样性技术,该系统可以容忍已知的漏洞,也可以容忍未知的漏洞。在检测出攻击之后,系统使用服务器自适应技术和请求过滤机制为用户提供持续的 Web 服务。

This paper presents an open system which provides web server with intrusion tolerance ability. The intrusion tolerant system can tolerate both known and unknown vulnerabilities through adaptation, redundancy and diversity. After detection of attacks, the system provides continuous web services for users using server adaptation and request filtering.