Design of a Secure System Considering Quality of Service

Symmetry

Seondong Heo³  Soojin Lee²  Seokjoo Doo¹ 

[1] Department of Electronic Engineering, Korea Army Academy at Yeong-cheon, 495 Hogukro, Gogyeong-myeon, Yeongcheon-si, Gyeongbuk 770-849, Korea; E-Mail:;Department of Computer Science and Engineering, Korea National Defense University, 33 Je2Jayuro, Goyang-si, Gyeonggi-do 412-706, Korea; E-Mail:;Department of Computer Science, Korea Advanced Institute of Science and Technology, 291 Daehak-ro, Yuseong-gu, Daejeon 305-701, Korea; E-Mail:

关键词: security;    quality of service;    quality of security service;    intrusion-tolerant system;    resource conversion;    virtual machine;   

DOI  :  10.3390/sym6040938

来源: mdpi

【 摘 要 】

Improvements in networking technologies have provided users with useful information services. Such information services may bring convenience and efficiency, but might be accompanied by vulnerabilities to a variety of attacks. Therefore, a variety of research to enhance the security of the systems and get the services at the same time has been carried out. Especially, research on intrusion-tolerant systems (ITSs) has been conducted in order to survive against every intrusion, rather than to detect and prevent them. In this paper, an ITS based on effective resource conversion (ERC) is presented to achieve the goal of intrusion-tolerance. Instead of using the fixed number of virtual machines (VMs) to process requests and recover as in conventional approaches, the ITS based on ERC can transform the assigned resources depending on the system status. This scheme is proved to maintain a certain level of quality of service (QoS) and quality of security service (QoSS) in threatening environments. The performance of ERC is compared with previous studies on ITS by CSIM 20, and it is verified that the proposed scheme is more effective in retaining a specific level of QoS and QoSS.

【 授权许可】

CC BY   
© 2014 by the authors; licensee MDPI, Basel, Switzerland