介绍了一种在Internet环境下入侵容忍系统技术.现代网络的安全研究主要是从如何防止攻击的角度来进行的.入侵容忍系统技术则假设攻击与正常数据是不能明确区分的,攻击的发生是不可避免的.如何在有攻击的情况下,使网络仍能为预期的合法用户提供有效的服务是入侵容忍系统技术的重点

Introduced a kind of architecture of Intrusion tolerant system for Internet services.As soon as we focus our attention on the intrusion attacks themselves,we cannot expect to develop a general protection mechanism because all attacks are not well-defined and there are always unknown attacks.But intrusion tolerance system technology achieves the security from the other point of view.Intrusion tolerance is the ultimate defense and assumes that unknown or unmitigated vulnerabilities remain in the system.The objective of intrusion tolerance is to maintain acceptable (but possibly degraded) system services when intrusions occur.