Intrusion Response Systems: A Survey

摘要: Publisher Summary This chapter considers the distributed systems as composed of multiple services and interact with one another through standardized network protocols. It describes primary Intrusion Response Systems (IRSs) label each in following four categories. IRSs, called static decision making, provides a mapping alert from detector to response that is be deployed. The second class, dynamic reasons about an ongoing attack based on observed alerts determines appropriate take. third intrusion tolerance diverse replicas, masking security failures use replicas concurrently for performing critical functions. fourth class includes IRSs meant target specific kinds attacks, our focus being denial-of-service attacks. Then, we present discussion nascent field benchmarking IRSs. Finally, presents five key areas which need evolve widespread adoption. In addition, it metrics are relevant evaluating IRS.