資源描述:
《lessons from the ptn and internetnew》由會(huì)員上傳分享,免費(fèi)在線閱讀,更多相關(guān)內(nèi)容在教育資源-天天文庫。
1、BUILDINGTRUSTWORTHYSYSTEMS:SURVIVABLESYSTEMSLessonsfromthePTNandInternetThePTNandInternetaretwoFREDB.SCHNEIDERCornellUniversitylargeandcomplexnetworkedSTEVENM.BELLOVINAT&TBellLabs—ResearchALANS.INOUYEinformationsystems.StudyingComputerScienceandTelecommun
2、icationsBoardthevulnerabilitiesoftheseationalandeconomicinfrastructuresarecomingtodependonNnetworkedinformationsystems,orNISs.Thesesystemsmustbesystemscanhelpidentifywaystrustworthy—dowhatusersandoperatorsexpect(andnotsome-thingelse)despiteenvironmentaldi
3、sruption,humanuserandoperatorerrors,attacksbyhostileparties,andsystemdesignandimplementationnewresearchmighteliminateerrors.Economicsdictatestheuseofcommercialoff-the-shelf(COTS)componentswhereverpossible,soNISdevelopershaveneithercontrolnordetailedinform
4、ationaboutmanyoftheirsystem’scomponents.Moreover,thosevulnerabilities.theincreasinguseofcomponentswhosefunctionalitycanbeextendedafterdeployment(“plug-and-play”andotherextensibleoperatingsystemfea-tures)meansusersanddesignersofanNIScannotknowwhatsoftwareh
5、asenteredsystemcomponentsorwhatactionsthosecomponentsmighttake.Trustworthinessisaholisticproperty,encompassingsecurity(conven-tionallyincludingconfidentiality,integrity,andavailability),correctness,reliability,privacy,safety,andsurvivability.Itisnotsuffic
6、ienttoaddressonlysomeofthesediversedimensions,norisitsufficientsimplytoassem-blecomponentsthatarethemselvestrustworthy.Integratingthecompo-nentsandunderstandinghowthetrustworthinessdimensionsinteractisacentralchallengeinbuildingatrustworthyNIS.Thepublicte
7、lephonenetwork(PTN)andtheInternetaretwolarge,complexNISsthatshedlightonthetechnicalproblemsfacedbythedevel-opersandoperatorsofotherNISs.Insomeways,thetwonetworksareverysimilar.Nosingleentityowns,manages,orcanevenhaveacompletepictureofeither.Bothnetworksin
8、volvelargenumbersofsubsystemsoperatedbydifferentorganizations.Thenumberandintricatenatureoftheinterfacesthatexistattheboundariesofthesesubsystemsareonesourceofcomplex-ity;theincreasingpopularityofadvancedservicesisa