RFITS—Randomized Failover Intrusion-Tolerant Systems

Sponsored by DARPA/IPTO's Organically Assured Survivable Information Systems (OASIS) program, this research effort developed a collection of novel survivability design patterns for building DoS-resistant highly-available information systems. The project successfully built and demonstrated a TRL 6 implementation of a patent-pending software product called VPNshield for protecting VPN services against flooding DoS attacks. Other products implemented under the effort include FlowShield, a DoS-resistance mechanism for protecting specified IP packet flows from flooding DoS attacks, and JMSshield, a patented middleware extension for protecting JMS applications from topic flooding DoS attacks. FlowShield technology was integrated within the Security Management System (SMS) developed by the US Army CERDEC.