Design and Implementation of Property-Oriented Detection for Link State Routing Protocols

摘要: This paper presents a new intrusion detection approach, property-oriented analysis and (POD). We discuss both the generic paradigm of this approach our design implementation experience within context link state routing system. A system is modeled as set distributed processes. property deflned predicate over variables. For protocol, overall converging P \equality" among information bases maintained by all decompose proto- col into difierent computation phases specify them us- ing Input/Output Automata (IOA). each phase, we use predicates (liveness safety property) guide for observation analysis. The goal algorithm to construct validation path based on his- tory determine if fault natural or malicious when rendered invalid faults. contribution three-fold: First, proposed difiers from traditional signature pro- flle paradigms in sense that it utilizes stable starting point, correlates history future validate changes caused nat- ural faults identify system; Second, exploring primary concerned properties, show efiort can be conducted more focused systematic fashion. Third, im- plementation shows how efiectively applied complex system, i.e.,