An autonomic security monitor for distributed operating systems

  • Authors:

  • Alvaro E. Arenas;Benjamin Aziz;Szymon Maj;Brian Matthews

  • Affiliations:

  • Department of Information Systems, Instituto de Empresa Business School, Madrid, Spain;School of Computing, University of Portsmouth, Portsmouth, U.K.;AGH University of Science and Technology, Krakow, Poland;e-Science Centre, STFC Rutherford Appleton Laboratory, Oxfordshire, U.K.

  • Venue:
  • ServiceWave'11 Proceedings of the 4th European conference on Towards a service-based internet
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper presents an autonomic system for the monitoring of security-relevant information in a Grid-based operating system. Our approach is multi-layered. The first layer is security-agnostic, monitoring the states of processes and jobs. The second layer is security-aware, monitoring pre-defined security events and co-relating then using rule-based policies. Policies are capable of controlling the system environment based on changes in levels of CPU/memory usage, accesses to system resources, detection of abnormal behaviour such as DDos attacks.