In environments like the Internet, faults follow unusualpatterns, dictated by the combination of malicious attackswith accidental faults such as long communication delayscaused by temporary network partitions. In this scenario,attackers can force buffer overflows in order to leave thesystem in an inconsistent state or to prevent it from doingprogress, causing a denial of service. This paper is about theeffects that finite memory has on intrusion-tolerant protocolsand systems. We present the problem and propose a genericmitigation technique based on repair nodes that reduces thebuffer space requirements. An experimental evaluation of thebuffer usage with and without this technique is presented, allowingto assess in practice the effects of finite memory in areal, albeit simple, intrusion-tolerant system.
Index Terms:
Intrusion Tolerance, Byzantine Fault Tolerance, Buffer Management, Garbage Collection.
Citation:
Giuliana Santos Veronese, Miguel Correia, Lau Cheuck Lung, Paulo Verissimo, "Finite Memory: A Vulnerability of Intrusion-Tolerant Systems," nca, pp.37-44, 2008 Seventh IEEE International Symposium on Network Computing and Applications, 2008