Date Added: Sep 2009
Survivability modeling and evaluation have gained increasing importance. Most existing models assume that the distributions for transitions between states are exponential. However, this assumption does not hold in many real cases. To address this problem, this paper proposes a novel semi-Markov survivability evaluation model, which allows the transitions between states to follow nonexponential distributions. Novel quantitative measures are also proposed to characterize the capability of a resilient system in surviving intrusions. Model validation, which is possibly the most important step in the life cycle of model development, is largely overlooked in previous research. In this paper, a real intrusion tolerant database system ITDB is implemented to validate the proposed state-space models.