Anti-correlation as a criterion to select appropriate counter-measures in an intrusion detection framework

摘要: Since current computer infrastructures are increasingly vulnerable to malicious activities, intrusion detection is necessary but unfortunately not sufficient. We need design effective response techniques circumvent intrusions when they detected. Our approach based on a library that implements different types of counter-measures. The idea decision support tool help the administrator choose, in this library, appropriate counter-measure given occurs. For purpose, we formally define notion anti-correlation which used determine counter-measures stop intrusion. Finally, present platform mechanisms presented paper.