George Mason University

Arun Sood

Yih Huang

David Arsenault

Anup K Ghosh

An attack resistant continuous network service trustworthiness controller comprising: state estimation module(s), response selection module(s), actuation module(s), and client dispatcher communication module(s) for maintaining the availability and integrity of online server(s). The state estimation module(s) are configured to generate state estimate(s) for online server(s) using behavior data obtained using sensor module(s). The response selection module(s) are configured to determine corrective action(s) to maintain the availability and integrity of online server(s) when state estimate(s) indicate that the integrity of an online server(s) is compromised. The actuation module(s) are configured to activate actuator(s) based upon the corrective action(s). Client dispatcher communication module(s) are configured to communicate online server availability information to a client dispatcher.

Attack resistant continuous network service trustworthiness controller

A method, system and computer program product for controlling a processing unit connected to a network. The method includes providing information to the network by the processing unit via plural communication channels; sending a reset signal from a controller to a reset unit of the processing unit after a specified amount of time, the reset unit being connected only to a communication channel of the controller and being isolated from the plural communication channels; and rebooting the processor unit when the reset signal is received by the reset unit.

Data alteration prevention system

A cache validating SCIT-DNS Server including a server cluster, a cache copy, a controller and a validation module. Each of the servers in the server cluster uses a DNS mapping cache which maps DNS name(s) to record entry(ies). The cache copy maintains an image of DNS mapping cache(s). The controller manages the state of servers. States include a live spare state; an exposed state; a quiescent state; and a self-cleansing state. The validation module validates DNS entry(s) using a retriever module and a comparisons module. Retriever module retrieves an independent record entry associated with a selected DNS name from an external DNS resolver. The comparison module compares the independent record entry retrieved by the retriever module with the record entry associated with the selected DNS name residing in the cache copy. The validation module may cause server(s) to take an affirmative action in response to detected validation error(s).

Cache validating SCIT DNS server

Disclosed is a self-cleansing intrusion tolerance-domain name systems system comprising at least three DNS servers, at least four storage systems accessible by the DNS servers, a communications link, a message transfer mechanism, and a self-cleansing mechanism. The storage systems include at least three online storage systems and at least one offline storage system. The communications link can connect the DNS servers with the storage systems, as well as connect the DNS servers with a local area network, which can connect the DNS servers with an external network. The message transfer mechanism can rotate the DNS servers into a plurality of roles, including a primary role, a secondary role, a designated role, and a self-cleansing role. The self-cleansing mechanism can be used to perform the self-cleansing role.

Self-cleansing secure DNS server

A system and method for processing a client request using single use virtual servers. The method: receives the client request from a network; passes the client request to a new virtual incoming client request server; passes an application request from the virtual incoming client request server to a new virtual application server; destroys the virtual incoming client request server; passes an application result from the virtual application server to a new virtual outgoing client result server; destroys the new virtual application server; passes the application result from the new virtual outgoing client request server to the network; and destroys the virtual outgoing client request server.

Single use server system

SCIT-DNS: critical infrastructure protection through secure DNS server dynamic updates

Disclosed is a self-cleansing system comprising at least two subsystems including an active subsystem and at least one available inactive subsystem. At least two of the subsystems may be connected to each other by a communications link and connected to an external network through a local network. An arbitration mechanism is capable of designating one of the at least one available inactive subsystem to be a designated active system. An active subsystem and a designated active subsystem may share an IP address, but only the active subsystem utilizes the IP address to output information to the external network. A transfer mechanism capable of deactivating the active subsystem and then activating a designated active system may be initiated by a transfer criterion. A self-cleansing mechanism may then cleanse the deactivated subsystem.

Growing community of inventors

Clifton, VA, United States of America

Arun Sood