Sciweavers

Share
COMPSAC
2009
IEEE

A Framework for Cost Sensitive Assessment of Intrusion Response Selection

10 years 3 months ago
A Framework for Cost Sensitive Assessment of Intrusion Response Selection
Abstract—In recent years, cost-sensitive intrusion response has gained significant interest, mainly due to its emphasis on the balance between potential damage incurred by the intrusion and cost of the response. However, one of the challenges in applying this approach is defining a consistent and adaptable measurement of these cost factors on the basis of system requirements and policy. In this paper, we present a host-based framework for the cost-sensitive assessment and selection of intrusion response. Specifically, we introduce a set of measurements that characterize the potential costs associated with the intrusion handling process, and propose an intrusion response evaluation method with respect to the risk of potential intrusion damage, the effectiveness of the response action and the response cost for a system. We provide an implementation of the proposed solution as an IDS-independent plugin tool and demonstrate its advantages on the several attack examples. Keywords-D.4.6...
Chris Strasburg, Natalia Stakhanova, Samik Basu, J
Added 21 Jul 2010
Updated 21 Jul 2010
Type Conference
Year 2009
Where COMPSAC
Authors Chris Strasburg, Natalia Stakhanova, Samik Basu, Johnny S. Wong
Comments (0)
books