通过双层反馈控制实现网络化系统的入侵容忍
Intrusion Tolerance for Networked Systems through Two-Level Feedback Control
AI总结：
本文将具有服务副本的系统入侵容忍表述为双层最优控制问题，设计新型控制架构TOLERANCE，证明最优策略的阈值结构并设计高效算法，实验证明其能有效提升服务可用性并降低运营成本。
摘要：
我们将具有服务副本的系统的入侵容忍问题表述为一个双层最优控制问题。在局部层面，节点控制器执行入侵恢复；在全局层面，系统控制器管理复制因子。局部和全局控制问题可以表述为运筹学中的经典问题，即机器更换问题和库存补充问题。基于此表述，我们设计了TOLERANCE，一种用于入侵容忍系统的新型控制架构。我们证明了两个层面上的最优控制策略均具有阈值结构，并设计了高效的算法来计算它们。我们在一个模拟环境中实现并评估了TOLERANCE，在该环境中运行了10种类型的网络入侵。结果表明，与最先进的入侵容忍系统相比，TOLERANCE能够提高服务可用性并降低运营成本。
英文摘要：
We formulate intrusion tolerance for a system with service replicas as a two-level optimal control problem. On the local level node controllers perform intrusion recovery, and on the global level a system controller manages the replication factor. The local and global control problems can be formulated as classical problems in operations research, namely, the machine replacement problem and the inventory replenishment problem. Based on this formulation, we design TOLERANCE, a novel control architecture for intrusion-tolerant systems. We prove that the optimal control strategies on both levels have threshold structure and design efficient algorithms for computing them. We implement and evaluate TOLERANCE in an emulation environment where we run 10 types of network intrusions. The results show that TOLERANCE can improve service availability and reduce operational cost compared with state-of-the-art intrusion-tolerant systems.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
