Risk-Aware Framework for Activating and Deactivating Policy-Based Response

摘要: With the growth of modern systems and infrastructures, automated intelligent response become holy grail security community. An interesting approach proposes to use dynamic access control policies specify for such systems. These should been forced when an ongoing attack, that threatens monitored system, is detected. However, existing work do not present a clear methodology Response policies. In particular, deactivation issue yet tackled. this paper, we first how Second, risk-aware framework proposed activate deactivate Hence, success likelihood threat, cumulative impact both threat response, are all considered.