Building Secure and Reliable Networks Through Robust Resource Scheduling

摘要

Providing fault tolerance and combating denial of service (DoS) attacks have traditionally been the research subjects of the fault tolerant computing community and the security community. This report takes a different perspective, one that applies a unified set of mechanisms and algorithms to the problem of protecting a network system from both failures and DoS attacks. The problem is viewed as a matter of resource allocation and management. Protection against DoS attacks is addressed as a special case of careful scheduling of time and fault tolerance is addressed as a special case of careful scheduling of space. A set of general scheduling mechanisms has been developed for both time and space. Specifically, the focus was on three key aspects of a networked system: (1) the local resources on each network router, (2) the network-wide resources applied to a given information service, and (3) the network bandwidth consumed by end- to-end flows.