网络入侵检测与实时响应的序贯博弈分析

目前,信息安全问题日益严峻,入侵检测系统的应用越来越广泛,可是从信息安全管理的角度来研究IDS应用还不深入.本文通过网络入侵检测与实时响应的序贯博弈分析,得出提高IDS检测的准确性和减少清除入侵花费的时间,对于减少骇客入侵,减少安全损失作用很大.而骇客攻击的概率和各方的效用参数无关.在一个时间周期,随着时间的推移骇客攻击的可能性将越来越大,而在线性条件的假设下管理员总是花费同样的时间清除入侵.

A Sequential Game Analysis of Intrusion Detection and Timeliness Response

Along with the information security more and more severe, the application of Intrusion Detection Systems has been popular increasingly. However, the in-depth research of IDS has not been made from the direct of information security management. In this paper, through the sequential game analysis of intrusion detection and timeliness response, some interesting conclusions were found. The elevation exactness of IDS and the reduction time of elimination intrusion can help decrease the intrusion and the loss of security. On the other hand, the attack probability of hacker has nothing to do with parameter of efficacy. And for a period of time, the probability of attack will increase with the time passed. In addition, security administrator may use same length of time elimination intrusion on the assumption linearity.