Research Triangle Institute

Feiyi Wang

Fengmin Gong

Chandramouli Sargor

Kishor S Trivedi

Kalyanaraman Vaidyanathan

Katerina Goseva-Popstojanova

Rong Wang

Balamurugan Muthusamy

An intrusion tolerant communication network and related methods is provided that places emphasis on continuity of operation and provides for an attack-survivable communication network whose network devices collectively accomplish the specified networking intent even under attack and despite active intrusions. The present invention defines methods for network intrusion tolerance in terms of the various state transitions that maximize the overall effectiveness of an intrusion tolerant communication network.

Intrusion tolerant communication networks and associated methods

The invention relates to a reconfigurable scalable intrusion-tolerant network that is interposed between a service requesting client and a protected server to minimize the impact of intrusive events. The apparatus may include a proxy server for receiving the requests from a client and forwarding them to a protected server. Acceptance monitors receive the response from a protected server and apply one or more acceptance tests. A ballot monitor receives the result of the acceptance tests and determines a response to the client. The network may also include an intrusion sensor to detect threats to the network and a reconfigurer to alter the network forwarding scheme. Reconfiguration may include isolating network elements, creating parallel paths, implementing redundant operations, or assessing the validity of responses.

Intrusion tolerant server system

Growing community of inventors

Raleigh, NC, United States of America

Feiyi Wang