Self-curing J2EE application server for intrusion tolerance and self-curing method thereof

Abstract

The invention discloses a self-curing J2EE application server for intrusion tolerance and a self-curing method thereof. The application server comprises an intrusion tolerance functional unit, a self-curing functional unit, a secure group communication system and a base platform for the J2EE application server, wherein the self-curing functional unit is used for receiving output results of the intrusion tolerance functional unit and the secure group communication system to carry out self-curing treatment, provides self-curing function support for the base platform for the J2EE application server and comprises a detection component, a management component and an execution component; the detection component detects intrusion and failure and submits results to the management component; the management component analyzes the detection results and gives and sends a curing scheme to the execution component; and the execution component cures the application server according to the curing scheme. On the basis of the intrusion tolerance method, the self-curing method is additionally provided with reactive recovery and periodic recovery, further improves the reliability and the survivabilityof the J2EE application server and can be applied to the field of network security.

Description

technical field [0001] The invention belongs to the field of computer technology, and relates to an application server, in particular to a self-healing J2EE application server and a self-healing method for intrusion tolerance, which is to add a self-healing function component on the J2EE application server with an intrusion-tolerant function, so as to further Enhance the security and reliability of J2EE application server. Background technique [0002] With the deepening of national informatization construction, the market demand for application server products based on J2EE middleware specification continues to increase. According to the CSDN middleware survey report, in China, after years of development, application servers based on the J2EE middleware specification have successfully occupied more than 80% of the market in the four major industries of finance, telecommunications, e-government, and e-commerce, and are widely used Applied in the information construction of ...

AI Technical Summary

Problems solved by technology

If the J2EE application server needs to run for a long time, software aging will naturally occur. Although software aging can be eliminated through software self-healing, software self-healing cannot solve the impact of external intrusion on the system, so we will software self-healing and tolerance The combination of intrusion and intrusion can not only eliminate software aging, but also ensure the survivability of the system in the presence of intrusion

In addition, if the self-healing object is only J2EE application server or operating system, it will inevitably generate a lot of overhead, which will greatly reduce the performance of the system; if the object is only J2EE application server components, it cannot completely eliminate the threat of network intrusion and Byzantine errors

[0006] Existing foreign related projects, for example, with the support of the CRUTIAL project, Paulo Sousa, AlyssonN.Bessani designed and developed CRUTIAL Information Switches (CIS), which provides key facilities with intrusion-tolerant and self-healing protection, but CIS is based on A stateless firewall is an implementation object, not designed for application servers

In addition, there are some researches on self-healing of J2EE application servers. For example, JAGR is a self-healing J2EE application server designed by G Candea et al. in 2003, but JAGR is mainly aimed at transient errors of J2EE application servers. Micro-restart is a recovery technology, and it can only be recovered for a single J2EE application server

JADE is a J2EE application server middleware platform with self-healing function designed by Sara Bouchenak et al. in 2005. It is a relatively complete self-healing middleware platform, but because JADE is built on the FRACTAL component framework designed by themselves , so the versatility is not strong

At present, there is no self-healing J2EE application server oriented to tolerance and intrusion in the academia and the market

Images