Modeling Insecurity: Enabling Recovery -Oriented Security With Dynamic Policies

To showcase the expressive power of our framework, I apply it to study network Denial of Service (DoS) attacks, and model resilience to such attacks as a survivability property. I show how we can systematically analyze the relative impact of different anti-DoS strategies by changing policies and mechanisms during an attack. Using our automated verification methodology, we formally prove for the first time whether strategies such as selective filtering, strong-authentication, and client-puzzles reduce the vulnerability of an example network to DoS attacks.

Name thesis:degree_name

Ph.D.

Level thesis:degree_level

Dissertation

Discipline thesis:degree_discipline

Computer Science

Grantor

University of Illinois at Urbana-Champaign

Year dc:date

2015

Author dc:creator

• Naldurg, Prasad G.

Contributors dc:contributor

• Campbell, Roy H.

• Computer Science

Language dc:language

eng

Identifier

(MiAaPQ)AAI3130990

OAI identifier oai:identifier

oai:www.ideals.illinois.edu:2142/81642