基于有限自动机的网络入侵容忍系统研究

Research of Intrusion Tolerant System Based on Finite State Automaton Machine

网络环境下的入侵容忍系统,在面对攻击的情况下,入侵容忍系统仍然能连续地为预期的用户提供相应的服务.该文描绘了入侵容忍系统的有限自动机,该自动机模拟了入侵容忍系统的各个状态之间的相互转换的条件和工作过程,为入侵容忍系统的行为描述和结构设计提供了理论依据,最后在此基础上讨论了一个入侵容忍实例.

In the network environment, an intrusion tolerant system is capable of continuing to provide service to legitimate clients in the presence of intrusions. An intrusion tolerant system is introduced, and its finite-state automaton machine is presented in this paper. The finite state automaton machine simulates and describes the conditions and process of states transition on the intrusion tolerant system, it is built upon the concept of intrusion effects rather than causes, and supplies a theory basis for designing architecture of the intrusion tolerant system. At last, an exploit is also discussed how to fit into the finite-state automaton machine.