1. The Architecture of the Starfish System: Mapping the Survivability Space Kim Kihlstrom Chris Phillips Chris Ritchey Ben LaBarbera Westmont College Priya Narasimhan Carnegie Mellon University

2. The Starfish SystemIASTED PDCS 2003 Starfish Goals Provide survivability for middleware applications Not specific to any middleware system Applicable to local and wide area systems Provide support for connected enterprises such as web services Allow linking of multiple Starfish

3. The Starfish SystemIASTED PDCS 2003 Starfish Protocol Stack

4. The Starfish SystemIASTED PDCS 2003 Creating the Survivability Space Define what is meant by survivability Evaluate existing systems Identify tradeoffs in survivability issues Develop cohesive framework for survivable system design

5. The Starfish SystemIASTED PDCS 2003 Survivability Encompasses but goes beyond reliability and security Provide useful services even in event of malicious attacks, intrusions, accidents, or faults

6. The Starfish SystemIASTED PDCS 2003 Survivability Space

7. The Starfish SystemIASTED PDCS 2003 Reliability Subspace

8. The Starfish SystemIASTED PDCS 2003 Security Subspace

9. The Starfish SystemIASTED PDCS 2003 Quality of Service Subspace

10. The Starfish SystemIASTED PDCS 2003 Mapping of Prior Systems Mapped a number of existing systems to survivability space

11. The Starfish SystemIASTED PDCS 2003 Starfish Philosophy Starfish allows for tradeoffs between security, reliability, and quality of service by providing body, shoulders, and arm regions Body: Byzantine fault model and high security guarantees, but lower performance and not scalable to wide area or large number of processors Arms: High performance and highly scalable, but supports only crash/omission/timing fault model and less stringent security guarantees Shoulders: Intermediate fault tolerance, security, performance and scalability

12. The Starfish SystemIASTED PDCS 2003

13. The Starfish SystemIASTED PDCS 2003 Linked Starfish

14. The Starfish SystemIASTED PDCS 2003 Starfish Reliability Subspace

15. The Starfish SystemIASTED PDCS 2003 Starfish Security Subspace

16. The Starfish SystemIASTED PDCS 2003 Starfish Quality of Service Subspace

17. The Starfish SystemIASTED PDCS 2003 Reliability Mechanisms Active and passive replication Majority voting Secure reliable ordered multicast Byzantine fault detector Value fault detector Secure membership Vaccination Timeouts Retransmission

18. The Starfish SystemIASTED PDCS 2003 Security Mechanisms Threshold scheme Encryption Identifiers Passwords MACs Signatures Byzantine fault detector Value fault detector Secure membership Logging Anomaly detection Sandboxing Intrusion history Message digests State transfer Quarantine Vaccination Membership Message Digests Removal Recovery

19. The Starfish SystemIASTED PDCS 2003 Quality of Service Mechanisms Removal/addition Migration Hierarchical Groups Message prioritization Optimistic Delivery Live Upgrades

20. The Starfish SystemIASTED PDCS 2003 Conclusions Mapping of prior systems to survivability space Mapping of Starfish body, shoulders, and arms to survivability space Identification of survivability properties and mechanisms for Starfish body, shoulders, and arms

21. The Starfish SystemIASTED PDCS 2003 Questions and Feedback Kim Kihlstrom kimkihls@westmont.edu http://homepage.westmont.edu/kimkihls/ Priya Narasimhan priya@cs.cmu.edu http://www.cs.cmu.edu/~priya/ Chris Phillips chphilli@westmont.edu