Security agility in response to intrusion detection

摘要: Cooperative frameworks for intrusion detection and response exemplify a key area of today's computer research: automating defenses against malicious attacks that increasingly are taking place at grander speeds scales to enhance the survivability distributed systems maintain mission critical functionality. At individual host-level, often includes security policy reconfiguration reduce risk further penetrations. However, runtime changes may cause traditional software components, designed without (dynamic) in mind, fail varying degrees, including termination processes. This paper presents agility, strategy provide components with awareness adaptability address changes, describes how agility is packaged prototype toolkit illustrates can be integrated help automate flexible host-based intrusions.