Hypotheses and Objectives Experimentation and Transition Automatic Trust Management for Adaptive Survivable Systems (ATM for ASS’s) Howard Shrobe, Jon Doyle Peter Szolovits, MIT AI and LCS DARPA ITS Program Hypotheses and Objectives Hypothesis: A Systems that builds a model of the trustability of its computation resources and that allocates resources accordingly will exhibit a high degree of survivability: I.e. it will deliver useful services even in the presence of successful attacks. Objective: To Develop a computational infrastructure that: Assimilates data from many sources Assesses the degree of compromise of the resources Allocates tasks to resources based on their trustability for the purpose of the task. Technical Approach Use the MAITA monitoring infrastructure being developed in our CC2 project to collect and collate data about attacks and about system misbehaviors. Automatically wrap application components with monitors checking for deviations from expected behavior and performance Develop an ontology of compromise states and trustability of resources Develop decision-theoretic techniques to manage the allocation of computational resources in the context of the trust-model Experimentation and Transition Schedule Establish a test-bed application system implementing the technical approach. Perform controlled experiments in which intentional attacks are conducted Measure the systems ability to diagnose the compromises Measure the system’s ability to perform useful, uncompromised services Use the MIT “Intelligent Room”, a distributed, agent-based system for perceptually enable command-post applications as a driving model. 1 2 3 4 1. Publish ontology of attacks, compromises and trust states. 2. Demonstrate trust modeling system using a variety of information sources 3. Demonstrate system for trust-driven, rational allocation of computational resources. 4. Demonstrate self-adaptive system capable of self-monitoring and trust-driven computational strategies.