A Network-Aware Distributed Membership Protocol for Collaborative Defense

— To counteract current trends in network malware, distributed solutions have been developed that harness the power of collaborative end-host sensors. While these systems greatly increase the ability to defend against attack, this comes at the cost of complexity due to the coordination of distributed hosts across the dynamic network. Many previous solutions for distributed membership maintenance are agnostic to network conditions and have high overhead, making them less than ideal in the dynamic enterprise environment. In this work, we propose a network-aware, distributed membership protocol, CLUSTER, which improves the performance of the overlay system by biasing neighbor selection towards beneficial nodes based on multiple system metrics and network social patterns (of devices and their users). We provide an extensible method for aggregating and comparing multiple, possibly unrelated metrics. We demonstrate the effectiveness and utility of our protocol through simulation using rea...

• Type: Conference
• Year: 2009
• Where: CSE
• Authors: David Zage, Carl Livadas, Eve M. Schooler
• Keywords: Collaborative End-host Sensors, Computer Science And Engineering, CSE 2009, Dynamic Enterprise Environment, Node Churn Statistics