CAJ | 학술논문

针对入侵容忍系统的一致性问题，提出一种基于 Quorum 结构的系统构建方法。以可信实时计算基为平台，采用同步和异步混合的时间模型，实现了客户端的读写协议、服务器的数据更新协议和数据复制协议。构造了入侵容忍的对称 Quorum系统、对称网格 Quorum 系统和非对称 Quorum 系统，从系统预期失效时间的角度分析了3种入侵容忍Quorum系统的可生存性，得出预期失效时间变化趋势与门限值、系统规模之间的关系。与其他 Quorum系统相比，在规模相同的情况下，提出的非对称入侵容忍 Quorum 系统的可生存性最高，高于f 屏蔽 Quorum 系统，对称网格入侵容忍 Quorum 系统的可生存性高于常规网格Quorum系统。
침대입침용인계통적일치성문제，제출일충기우 Quorum 결구적계통구건방법。이가신실시계산기위평태，채용동보화이보혼합적시간모형，실현료객호단적독사협의、복무기적수거경신협의화수거복제협의。구조료입침용인적대칭 Quorum계통、대칭망격 Quorum 계통화비대칭 Quorum 계통，종계통예기실효시간적각도분석료3충입침용인Quorum계통적가생존성，득출예기실효시간변화추세여문한치、계통규모지간적관계。여기타 Quorum계통상비，재규모상동적정황하，제출적비대칭입침용인 Quorum 계통적가생존성최고，고우f 병폐 Quorum 계통，대칭망격입침용인 Quorum 계통적가생존성고우상규망격Quorum계통。
To solve the consistency problem of intrusion-tolerant system,a method to build the system based on Quorum was proposed in this paper.The hybrid model of synchronous and asynchronous time was adopted,and the trusted timely computing base used as a platform to implement the intrusion-tolerant protocols,i.e.,read-write protocols in clients and update-copy protocols in servers.Three types of intru-sion-tolerant systems named symmetrical Quorum system,symmetrical grid Quorum system and asym-metrical Quorum system were built and proved to be reasonable.The survivability of these intrusion-toler-ant Quorum systems was analyzed from the perspective of expected time to failure(ETF).Some factors that will affect the expected time to failure were analyzed,so as to obtain the relationship between thresh-old,system size and the expected time to failure.Compared with the other Quorum systems,the proposed asymmetrical intrusion tolerant Quorum system has the highest survivability,while symmetrical intrusion tolerant Quorum system is of higher survivability than that of f-mask Quorum system and symmetrical grid intrusion tolerant Quorum system is of higher survivability than that of general Quorum system.