An autonomic security monitor for distributed operating systems (invited paper)

Abstract

This paper presents an autonomic system for the monitoring of security-relevant information in a Grid-based operating system. Our approach is multi-layered. The first layer is security-agnostic, monitoring the states of processes and jobs. The second layer is security-aware, monitoring pre-defined security events and co-relating then using rule-based policies. Policies are capable of controlling the system environment based on changes in levels of CPU/memory usage, accesses to system resources, detection of abnormal behaviour such as DDos attacks. © 2011 Springer-Verlag.