Resilient self-organizing overlay networks for security update delivery

Rapid and widespread dissemination of security updates throughout the Internet will be invaluable for many purposes, including sending early-warning signals, updating certificate revocation lists, distributing new virus signatures, etc. Notifying a large number of machines securely, quickly, and rel...

Full description

Saved in:
Bibliographic Details
Published in:IEEE journal on selected areas in communications 2004-01, Vol.22 (1), p.189-202
Main Authors: Jun Li, Reiher, P.L., Popek, G.J.
Format: Article
Language:English
Subjects:
Broadcasting
Costs
Countermeasures
Distributing
Environmental engineering
Information security
Internet
IP networks
Large-scale systems
Marketing
Networks
Power system security
Prototypes
Security
Signatures
Unicast
Velocity measurement
Citations: Items that this one cites
Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Rapid and widespread dissemination of security updates throughout the Internet will be invaluable for many purposes, including sending early-warning signals, updating certificate revocation lists, distributing new virus signatures, etc. Notifying a large number of machines securely, quickly, and reliably is challenging. Such a system must outpace the propagation of threats, handle complexities in a large-scale environment, deal with interruption attacks on dissemination, and also secure itself. Revere addresses these problems by building a large-scale, self-organizing, and resilient overlay network on top of the Internet. We discuss how to secure the dissemination procedure and the overlay network, considering possible attacks and countermeasures. We present experimental measurements of a prototype implementation of Revere gathered using a large-scale-oriented approach. These measurements suggest that Revere can deliver security updates at the required scale, speed and resiliency for a reasonable cost.
ISSN:0733-8716
1558-0008
DOI:10.1109/JSAC.2003.818808