SITAR: a scalable intrusion-tolerant architecture for distributed services - a technology summary

SITAR (Scalable Intrusion-Tolerant Architecture for Distributed Services) is a proposed architecture for protecting generic classes of services built from commercially off-the-shelf (COTS) components, such as Web based services and DNS services. SITAR uses both proactive as well as reactive methods to mitigate the effects of compromises from external attacks and accidental faults. In addition, the SITAR project explores analytical and measurement-based evaluation methods for quantitative assessment of operational security. Ultimately, the architecture strives to ensure confidentiality, integrity, and availability.