Automatic Intrusion Response System Based on Aggregation and Cost

摘要：

One of the most significant issues in intrusion detection is automating responses to intrusions,but has so far been largely overlooked and therefore requires further research in its own right.And another main weakness of current intrusion detection systems is that they often generate too many same or similar alerts for one intrusion and system immune alerts.This will use a lot of time to respond repeatedly.As a result,a better method to solve above problem is making use of the aggregation to classify the alerts and the Response Cost to decrease the system immune alerts.At last,this paper presents a modal of automatic intrusion response system and introduces the implement in detail.

作者: Yu Sun Rubo Zhang

作者单位: College of Information,Guangdong Ocean University,Zhanjiang,524088,China College of Computer Science and Technology,Harbin Engineering University,Harbin150001,China

会议类型: 国际会议

会议名称: 2008 IEEE International Conference on Onformation and Automation(IEEE 信息与自动化国际会议)

会议地点: 张家界

会议语种:英文

页码: 1783-1786

在线出版日期: 2008-06-20（万方平台首次上网日期，不代表论文的发表时间）