NAIR: A novel automated intrusion response system based on decision making approach

2010 IEEE International Conference on Information and Automation, ICIA 2010

Volumn , Issue , 2010, Pages 543-548

  Zan, Xin ^a   Gao, Feng ^a   Han, Jiuqiang ^a   Liu, Xiaoyong ^a   Zhou, Jiaping ^a  

^a XI'AN JIAOTONG UNIVERSITY   (China)

Author keywords

Automated intrusion response; Component; Cost function alaysis; HMM; POMDP

Indexed keywords

AUTOMATED INTRUSION RESPONSE SYSTEM; AUTOMATED RESPONSE; COMPONENT; DIFFERENT ATTACKS; DYNAMIC NATURE; HMM; INTRUSION RESPONSE; POMDP; RESEARCH PROBLEMS; RUNTIMES;

COST FUNCTIONS; DECISION MAKING; NETWORK SECURITY;

AUTOMATION;

EID: 77955731051     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICINFA.2010.5512396     Document Type: Conference Paper

References (9)

1. T. Bowen, D. Chee, M. Segal, R. Sekar, T. Shanbhag, and P. Uppuluri. Building survivable systems: An integrated approach based on intrusion detection and damage containment. In Proceedings of the IEEE DARPA Information Survivability.
2. W. Lee, W. Fan, M. Millerand, S. Stolfo, and E. Zadok. Toward cost-sensitive modeling for intrusion detection and response. In Journal of Computer Security, volume 10, pages 5-22, 2000.
3. Saman A. Zonouz, Himanshu Khurana, William H. Sanders, and Tim Yardley, RRE: A Game-theoretic Response and Recovery Engine. The 39th Annual IEEE/IFIP International Conference on Dependable Systems and Networks. Lisbon,Portugal.
4. Zonghua Zhanga,PinHan Ho, Liwen He, Measuring IDS-estimated attack impacts for rational incident response: A decision theoretic approach.Journal of Computer Security, volume 28, p605-<614, 2009.
5. Viterbi AJ, "Error bounds for convolutional codes and an asymptotically optimum decoding algorithm". IEEE Transactions on Information Theory 13 (2): 260-269.
6. Ästrom, K. J. (1965). Optimal control of markov decision processes with incomplete state estimation. Journal of Mathematical Analysis and Applications, 10, 174-205.
7. Sondik, E. J. (1971). The Optimal Control of Partially Observable Markov Processes. Ph.D. thesis, Stanford University.
8. Joelle Pineau, Geoffrey J. Gordon, Sebastian Thrun: Anytime Point-Based Approximations for Large POMDPs. J. Artif. Intell. Res. (JAIR) 27: 335-380 (2006).
9. S. Koenig and R. Simmons, "A robot navigation architecture based on partially observable Markov decision process models," in Artificial Intelligence Based Mobile Robotics:Case Studies of Successful Robot Systems (D. Kortenkamp, R. Bonasso, and R. Murphy, eds.), pp. 91-122, MIT press, 1998.