A Proactive Intrusion Response Model with Tolerant Abilities
Intrusion Response Systems(IRS) can take actions when they have detected intrusions, but existing IRS almost had a long time window before responses which gave intruder enough time to explore leakages and compromise services. Furthermore, most IRS depended on intrusion detections whose probabilities of mistake reports and leakage reports are rather high. This paper presents a proactive intrusion response model 1 with tolerant abilities based on proactive intrusion response technique and damage containment technique, which can make proactive reaction in the forepart and guarantee services working uninterrupted, even though system has been intruded and data has been destroyed already.
Intrusion Response Systems(IRS) intrusion tolerant survivability Intrusion Graph(IG)
LIAO Kai ZHANG Laishun GUO Yuanbo FAN Yudan
Institute of Electronic Technology, Information Engineering University of PLA, Zhengzhou, 450004, China
国际会议
北京
英文
2007-08-05（万方平台首次上网日期，不代表论文的发表时间）