Loading...
Please wait, while we are loading the content...
Similar Documents
On the Self-Protection of Firewalls and Distributed Intrusion Detection Systems
| Content Provider | Semantic Scholar |
|---|---|
| Author | Hedbom, Hans |
| Copyright Year | 2001 |
| Abstract | Distributed computing is performed by allowing a possibly large number of interconnectedentities to process distributed information. The complexity of these systemsincreases the risk of exposing information to unauthorized parties and opens up the possibilityof new threats and new vulnerabilities. Thus, the security of the systems cannot beprovided by the local computer, but is dependent on the security of all the computers andcommunication channels involved. In order to counter these new threats, security extensions,such as firewalls and intrusion detection systems, are often added to the system.However, to be more effective the extensions need to reflect the structure of the systemthey should protect, i.e. they must cooperate or wherever appropriate be distributed themselves.One aspect which is often neglected in this context is that the introduction of securityextensions may in itself introduce new vulnerabilities. This comes from the fact thatthe extensions rely on sensitive information in order to work properly. Another aspect isthat commonly used operating systems do not provide a trustworthy platform for the security extensions, so the security can not be based on the security of the underlying system.One way to solve this problem is to let the extension take care of its own protection, i.e. provide self-protection. This thesis addresses the self-protection problem and discusses the avoidance of the risks and dangers associated with the use of security extensions. One specific issue of self-protection is studied in particular, namely that of protecting the detection policy of a distributed intrusion detection system. A protection method using one-way functions is proposed. |
| File Format | PDF HTM / HTML |
| Alternate Webpage(s) | http://www.ce.chalmers.se/research/Security/Publications/pubs/hanslic.pdf |
| Language | English |
| Access Restriction | Open |
| Content Type | Text |
| Resource Type | Article |
