网络环境下自适应入侵响应系统研究与设计

根据对攻击类型、攻击检测时间、攻击报警可信度和环境因素等信息的考虑,将入侵响应分类,对警报可信度、攻击频率、风险评估和响应成本进行数学分析,利用以上研究结果设计了一种能对入侵做出自动响应并根据环境变化动态调整安全策略的自适应入侵响应系统.

Research on adaptive intrusion response system and its design

Taking the types of attacks, the attack detection time, the reliability of the alarms and environmental factors into consideration, a mathematical analysis of the alarm confidence level, the attack frequency, the risk assessment and the response cost are analyzed mathematically. Then by using above findings, an adaptive intrusion response system that is able to make automated response is designed and the security policies according to the environmental variation can be adjusted dynamically.