Quantitative Security Evaluation of Intrusion Tolerant Systems With Markovian Arrivals

Intrusion tolerance is an ability to keep the correct service by masking the intrusion based on fault-tolerant techniques. With the rapid development of virtualization, the virtual machine (VM)-based intrusion tolerance scheme has been developed according to the concept of state machine replication with Byzantine fault tolerant technique. In this article, we present the quantitative security evaluation of the VM-based intrusion tolerant system with the time to security failure. We assume that the arrival stream follows a Markovian arrival process (MAP), which is one of the most general stochastic processes, and analytically derive the Laplace-Stieltjes transform of time to security failure based on the analysis of the MAP/G/1/∞ queue.