SGNET: A worldwide deployable framework to support the analysis of malware threat models

Corrado Leita, Marc Dacier

Research output: Chapter in Book/Report/Conference proceedingConference contribution

38 Scopus citations


The dependability community has expressed a growing interest in the recent years for the effects of malicious, external, operational faults in computing systems, ie. intrusions. The term intrusion tolerance has been introduced to emphasize the need to go beyond what classical fault tolerant systems were able to offer. Unfortunately, as opposed to well understood accidental faults, the domain is still lacking sound data sets and models to offer rationales in the design of intrusion tolerant solutions. In this paper, we describe a framework similar in its spirit to so called honey-farms but built in a way that makes its large-scale deployment easily feasible. Furthermore, it offers a very rich level of interaction with the attackers without suffering from the drawbacks of expensive high interaction systems. The system is described, a prototype is presented as well as some preliminary results that highlight the feasibility as well as the usefulness of the approach. © 2008 IEEE.
Original languageEnglish (US)
Title of host publicationProceedings - 7th European Dependable Computing Conference, EDCC-7
Number of pages11
StatePublished - Sep 17 2008
Externally publishedYes

Bibliographical note

Generated from Scopus record by KAUST IRTS on 2022-09-12


Dive into the research topics of 'SGNET: A worldwide deployable framework to support the analysis of malware threat models'. Together they form a unique fingerprint.

Cite this