Disseminating Security Updates at Internet Scale

Disseminating Security Updates at Internet Scale describes a new system, "e;Revere"e;, that addresses these problems. "e;Revere"e; builds large-scale, self-organizing and resilient overlay networks on top of the Internet to push security updates from dissemination centers to individual nodes. "e;Revere"e; also sets up repository servers for individual nodes to pull missed security updates. This book further discusses how to protect this push-and-pull dissemination procedure and how to secure "e;Revere"e; overlay networks, considering possible attacks and countermeasures. Disseminating Security Updates at Internet Scale presents experimental measurements of a prototype implementation of "e;Revere"e; gathered using a large-scale oriented approach. These measurements suggest that "e;Revere"e; can deliver security updates at the required scale, speed and resiliency for a reasonable cost.Disseminating Security Updates at Internet Scale will be helpful to those trying to design peer systems at large scale when security is a concern, since many of the issues faced by these designs are also faced by "e;Revere"e;. The "e;Revere"e; solutions may not always be appropriate for other peer systems with very different goals, but the analysis of the problems and possible solutions discussed here will be helpful in designing a customized approach for such systems.