The Synergy Of Network Security Incidents Restoration Technology

This paper is supported by "Network Cooperative Security Technology Research", the National High Technology Research and Development Program of China (863 Program) under contract No. 2003AA142060, and "Intrusion Detection System based on IPv6", the Innovative Research Fund of Northwest Polytechnic University under contract No. Z20040054. Author spent much time on the research and analysis of the technology of Cooperative Disaster Recovery in the project, and studied the latest national and international technology in this field, finally finished the Cooperative Disaster Recovery system (CDRS).Nowadays, Disaster Recovery is one of hotspots in domain of network security. The objective of CDRS is an efficient and low cost system which save multi-replica in remote host and cooperate with other network security system. The performance of Disaster Recovery manifests in speed of backup/restore, the synchronization between original date and its replica and security itself. These aspects have been fully considered, and a plan of Disaster Recovery System is proposed. The main content and works of this research are shown as follows.(1) Collectivity framework and process of CDRS is designed, and concept of alliance of CDRS is presented. The hosts of the alliance are peer to peer and store replica each other.(2) An algorithm of Multi-Source Backup and Recovery quick Transmission (MSB&RT) is presented and used in transmition of vast scale files, which carry out the fast multi-replicate and the fast restoration of mass data.(3) An algorithm of Efficient Remote Data Synchronization (ERDS) is presented, which implement real-time restore of crucial data and maintenance of replica.(4) A scheme of management of CDRS alliance and replica is proposed, check-up of alliance member, selection of replica node and update of replica included. The self-acting management of Disaster Recovery System can be realized via the scheme. Security and effectivity of the system is guaranteed.(5) Linear Error Correction Code (LECC) is used to resolve the problem of Error Correction in the process of backup and restore.The above studies have been applied respectively in "Network Cooperative Security" and "Intrusion Detection System based on IPv6". The former project has been approved by "863" expert group in 24th NOV 2005, and the later one has been approved by expert group in MAY 2005. The system applied in Finance department of Shaanxi and Examinations department of Shaanxi. The effect is satisfying.