入侵容忍系统及其关键机制

入侵容忍关注信息网络在受到攻击或破坏时如何保持能够提供连续不间断系统服务的问题。入侵容忍系统是信息网络安全防护体系极其重要的组成部分。文章介绍了入侵容忍系统的三个子系统：服务调度和监控子系统主要用于调度和监控关键服务器群；信息多元管理和存储子系统主要用于对关键信息的多元性分割、存储和集成；报警信息聚合和关联子系统主要实现对传统安全数据信息的聚合和关联。还介绍用于实现入侵容忍系统的四个关键机制，以及入侵容忍系统的实践应用。

Intrusion Tolerant System and the Key Mechanisms

Intrusion Tolerance focus on remaining and providing continual network service even in the presence of attacks or intrusions. Intrusion Tolerant System is the one of important component for the network security architecture. We introduce three sub-system of Intrusion Tolerant System: the service schedule and surveillance sub-system is used to allocate and monitor the key application server group; the information diversity management and storage sub-system is used to diversify, store and integrate the key data information; the alarm information aggregation and correlation sub-system is used to aggregate and correlate the classical secure information. Four key mechanisms which is use to implement the Intrusion Tolerant System are also proposed. Finally, the practical implement of Intrusion Tolerant System is discussed.