容忍入侵的自适应安全通信系统模型与设计

Novel and Intrusion-tolerant Approach to Adaptive Secure Communication

针对传统安全通信系统采用静态安全策略,缺乏容忍入侵能力和灵活性的问题,提出了一种多重驱动的容忍入侵自适应安全通信模型。能够根据系统当前安全态势及系统资源状态和系统配置变化、用户使用偏好等因素,动态自适应地调整每个会话的安全策略,增加系统的人为多样性和不可预测性,并实现性能和系统安全防护强度/容忍入侵能力等方面的最佳折衷。

Current secure communication systems apply a uniform and statically decided security policy to each session, which will be broke down when any security methods used in the policy is compromised. A novel approach to adaptive secure communication was proposed, in which the adaptive is driven by multi-sources, including threat, performance, etc. By using of redundancy and adaptation techniques, the secure communication system can dynamically reconfigure itself on per session basis, based on the awareness of system＇s current security situation, resources available, configuration, and the user＇s preference, thereby achieve a better tradeoff in system＇s security and performance.