1. Hypotheses and Objectives Experimentation and Transition
Automatic Trust Management for Adaptive Survivable Systems (ATM for ASS’s) Howard Shrobe, Jon Doyle Peter Szolovits, MIT AI and LCS DARPA ITS Program
Hypotheses and Objectives
Hypothesis: A Systems that builds a model of the trustability of its computation resources and that allocates resources accordingly will exhibit a high degree of survivability: I.e. it will deliver useful services even in the presence of successful attacks.
Objective: To Develop a computational infrastructure that:
Assimilates data from many sources
Assesses the degree of compromise of the resources
Allocates tasks to resources based on their trustability for the purpose of the task.
Technical Approach
Use the MAITA monitoring infrastructure being developed in our CC2 project to collect and collate data about attacks and about system misbehaviors.
Automatically wrap application components with monitors checking for deviations from expected behavior and performance
Develop an ontology of compromise states and trustability of resources
Develop decision-theoretic techniques to manage the allocation of computational resources in the context of the trust-model
Experimentation and Transition
Schedule
Establish a test-bed application system implementing the technical approach.
Perform controlled experiments in which intentional attacks are conducted
Measure the systems ability to diagnose the compromises
Measure the system’s ability to perform useful, uncompromised services
Use the MIT “Intelligent Room”, a distributed, agent-based system for perceptually enable command-post applications as a driving model. 1 2 3 4
1. Publish ontology of attacks, compromises and trust states.
2. Demonstrate trust modeling system using a variety of information sources
3. Demonstrate system for trust-driven, rational allocation of computational resources.
4. Demonstrate self-adaptive system capable of self-monitoring and trust-driven computational strategies.