A decisional framework system for computer network intrusion detection

doi:10.1016/j.ejor.2005.10.020

A decisional framework system for computer network intrusion detection

2007-03-01

8

PRE

AI

DOI：10.1016/j.ejor.2005.10.020

Original

Original request for help

Save

Abstract

En 中文

This paper presents a multi-attribute decisional framework for computer network intrusion detection. First, a cost model that allows to estimate accurately the damage resulting from a security incident is described. Then, a multi-attribute optimization algorithm is applied to select the optimal decision based on alternatives to remedy such incidents. The major interest is that the proposed approach can be applied in collaborative reactive intrusion detection where human experts are assisted by automated tools to find the best response. The approach would allow the possibility to assess the performance of the whole system depending on the performance of each constituents' leading to a definition of optimality conditions on the introduced framework. (c) 2005 Elsevier B.V. All rights reserved.

Keywords:

intrusion detection

incident response

multi-attribute decision theory

A decisional framework system for computer network intrusion detection

Abstract

Journal

Organization