Developing a Distributed System for Infrastructure Protection

Y our business increasingly relies on computer-controlled systems vulnerable to intrusion and destruction. The recent distributed denial of service attacks (DDoS) against e-commerce companies showed that this vulnerability extends beyond your own corporate networks:The very infrastructure of the Internet is at risk.When infoterrorists use the networks’ high connectivity and low security to launch attacks against critical information infrastructure systems, they can not only disrupt global e-commerce and communications, but can also adversely affect other critical infrastructure services such as energy, transportation, healthcare,finance,and water supply. How can organizations protect these systems from infoterrorism? They must leverage modern information technologies to create an infrastructure protection process that can operate quickly and seamlessly.We propose a six-stage protection process that involves intelligence gathering, analysis, interdiction, detection, response,and recovery.To implement this process, we’ve designed an underlying Web-like architecture that will serve as a platform for the decentralized monitoring and management of critical infrastructures. THE PROTECTION PROCESS The recent spate of DDoS attacks revealed two disturbing trends: