trusted recovery and defensive information warfare
peng liu,jajodia
Synopsis "trusted recovery and defensive information warfare"
information security concerns the confidentiality, integrity, and availability of information processed by a computer system. with an emphasis on prevention, traditional information security research has focused little on the ability to survive successful attacks, which can seriously impair the integrity and availability of a system. trusted recovery and defensive information warfare uses database trusted recovery, as an example, to illustrate the principles of trusted recovery in defensive information warfare. traditional database recovery mechanisms do not address trusted recovery, except for complete rollbacks, which undo the work of benign transactions as well as malicious ones, and compensating transactions, whose utility depends on application semantics. database trusted recovery faces a set of unique challenges. in particular, trusted database recovery is complicated mainly by (a) the presence of benign transactions that depend, directly or indirectly on malicious transactions; and (b) the requirement by many mission-critical database applications that trusted recovery should be done on-the-fly without blocking the execution of new user transactions. trusted recovery and defensive information warfare proposes a new model and a set of innovative algorithms for database trusted recovery. both read-write dependency based and semantics based trusted recovery algorithms are proposed. both static and dynamic database trusted recovery algorithms are proposed. these algorithms can typically save a lot of work by innocent users and can satisfy a variety of attack recovery requirements of real world database applications. trusted recovery and defensive information warfare is suitable as a secondary text for a graduate level course in computer science, and as a reference for researchers and practitioners in information security.
