Closing Cluster Attack Windows Through Server Redundancy and Rotations

— It is well-understood that increasing redundancy in a system generally improves the availability and dependability of the system. In server clusters, one important form of redundancy is spare servers. Cluster security, while universally recognized as an important subject in its own right, has not often been associated with the issue of redundancy. In prior work, we developed a Self-Cleansing Intrusion Tolerance (SCIT) architecture that strengthens cluster security through periodic server rotations and self-cleansing. In this work,1 we consider the servers in the cleansing mode as redundant, spare hardware and develop a unified control algorithm that manages the requirements of both security and service availability. We will show the advantages of our algorithm in the following areas: (1) Intrusion tolerance through constant server rotations and cleansing, (2) Survivability in events of server failures, (3) Guarantee of service availability as long as the cluster has a minimum numbe...

• Type: Conference
• Year: 2006
• Where: CCGRID
• Authors: Yih Huang, David Arsenault, Arun Sood
• Keywords: CCGRID 2006, Cluster Computing, Cluster Security, Intrusion Tolerance, Server Rotations