资源描述:
《building trustworthy systems lessons from the ptn and internet》由会员上传分享,免费在线阅读,更多相关内容在教育资源-天天文库。
1、SURVIVABLESYSTEMSBUILDINGTRUSTWORTHYSYSTEMS:LessonsfromthePTNandInternetThePTNandInternetaretwoFREDB.SCHNEIDERCornellUniversitylargeandcomplexnetworkedSTEVENM.BELLOVINAT&TLabs–ResearchALANS.INOUYEinformationsystems.StudyingComputerScienceandTelecommunicationsBoardthevulnerabilitiesof
2、theseationalandeconomicinfrastructuresarecomingtodependonsystemscanhelpidentifywaysNnetworkedinformationsystems,orNISs.Thesesystemsmustbetrustworthy—dowhatusersandoperatorsexpect(andnotsome-thingelse)despiteenvironmentaldisruption,humanuserandoperatornewresearchmighteliminateerrors,a
3、ttacksbyhostileparties,andsystemdesignandimplementationerrors.Economicsdictatestheuseofcommercialofftheshelf(COTS)com-ponentswhereverpossible,soNISdevelopershaveneithercontrolnorthosevulnerabilities.detailedinformationaboutmanyoftheirsystem’scomponents.Moreover,theincreasinguseofcomp
4、onentswhosefunctionalitycanbeextendedafterdeployment(“plug-and-play”andotherextensibleoperatingsystemfea-tures)meansusersanddesignersofanNIScannotknowwhatsoftwarehasenteredsystemcomponentsorwhatactionsthosecomponentsmighttake.Trustworthinessisaholisticproperty,encompassingsecurity(co
5、nven-tionallyincludingconfidentiality,integrity,andavailability),correctness,reliability,privacy,safety,andsurvivability.Itisnotsufficienttoaddressonlysomeofthesediversedimensions,norisitsufficientsimplytoassem-blecomponentsthatarethemselvestrustworthy.Integratingthecompo-nentsandund
6、erstandinghowthetrustworthinessdimensionsinteractisacentralchallengeinbuildingatrustworthyNIS.Thepublictelephonenetwork(PTN)andtheInternetaretwolarge,complexNISsthatshedlightonthetechnicalproblemsfacedbythedevel-opersandoperatorsofotherNISs.Insomeways,thetwonetworksareverysimilar.Nos
7、ingleentityowns,manages,orcanevenhaveacompletepic-tureofeither.Bothnetworksinvolvelargenumbersofsubsystemsoperat-IEEEINTERNETCOMPUTING1089-7801/99/$10.00©1999IEEEhttp://computer.org/internet/NOVEMBER•DECEMBER199953SURVIVABLESYSTEMSedbydifferentorganizations.Thenumberanderclearancefro
8、mtelecommuni