Policy Specification for Non-Local Fault Tolerance in Large Distributed Information Systems

摘要: Abstract : The services provided by critical infrastructure systems are essential to the operation of modem society. These include financial payments system, transportation systems, military command and control electric power grid, telecommunications including Internet. Widespread failure any these system might result in severe loss or perhaps human injury. Critical rely heavily on distributed information for operation. must therefore be dependable; that is, they "deliver service can justifiably trusted." Traditional dependability alone does not provide a rich enough model deal with faults large, operating hostile environments. require simply but instead survivability. Informally, survivability is when has "the ability continue (possibly degraded different) given environment various events cause major damage its environment." One means achieving non-local fault tolerance, where affect significant portions network detected handled coordinated fashion. Our approach doing this system. This takes sensor as input, uses detect faults, responds application reconfiguration. thesis presents TEDL, Time-based Event Detection Language, formal specification reactive policy A translator used synthesize an executable implementation from specification. results using TEDL describe execute several attack scenarios simplified presented.