Design of a Lightweight Intrusion-Tolerant System for Highly Available Servers

摘要

This paper proposes a new lightweight intrusion-tolerant (LIT) system for highly available servers. The LIT system is designed to eliminate single points of failure caused by cyberattacks on vulnerabilities of software and hardware implementations at the least hardware resources. In contrast, other systems require many physical resources to diversify a server application and an operating system. The LIT system consists of two different hypervisors that run only three virtual machines for a load balancer and two different application servers of the same protocol in parallel. A prototype for an authoritative name server was implemented and evaluated. This prototype could continue to provide the service to full-service resolvers without downtime due to cyberattacks, and its overhead had no effect on service performance.