期刊名称:International Journal of Computer Science and Network Security
印刷版ISSN:1738-7906
出版年度:2012
卷号:12
期号:1
页码:1-14
出版社:International Journal of Computer Science and Network Security
摘要:This paper presents a taxonomy of intrusion response systems (IRS), classifying a number of research papers published during the past decade that provide us with many valuable insights into the field of Internet security. In recent years, we have seen impressive changes in how attackers gain access to systems and infect computers. We discuss the key features of IRS that are crucial for defending a system from attack. Choosing the right security measures and responses is an important and challenging part of designing an IRS. If we fail to do so, our automated response systems will reduce network performance and wrongly disconnect users from a network. We address this challenge here, and introduce the concept of ""response cost"", in an attempt to meet users needs in terms of quality of service (QoS) and the interdependency of critical processes. This taxonomy will open up interesting areas for future research in the growing field of intrusion response systems.