ADEPTS: Adaptive intrusion response using attack graphs in an e-commerce environment

Bingrui Foo, Yu-Sung Wu, Yu Chun Mao, Saurabh Bagchi, Eugene Spafford

研究成果: Paper同行評審

107 引文 斯高帕斯(Scopus)

摘要

Distributed systems with multiple interacting services, especially e-commerce systems, are suitable targets for malicious attacks because of the potential financial impact. Compared to intrusion detection, automated response has received relatively less attention. In this paper, we present the design of automated response mechanisms in an intrusion tolerant system called ADEPTS. Our focus is on enforcing containment in the system, thus localizing the intrusion and allowing the system to provide service, albeit degraded. ADEPTS uses a graph of intrusion goals, called I-GRAPH, as the underlying representation in the system. In response to alerts from an intrusion detection framework, ADEPTS executes algorithms to determine the spread of the intrusion and the appropriate responses to deploy. A feedback mechanism evaluates the success of a deployed response and uses that in guiding future choices. ADEPTS is demonstrated on a distributed e-commerce system and evaluated using a survivability metric.

原文English
頁面508-517
頁數10
出版狀態Published - 9 十一月 2005
事件2005 International Conference on Dependable Systems and Networks - Yokohama, Japan
持續時間: 28 六月 20051 七月 2005

Conference

Conference2005 International Conference on Dependable Systems and Networks
國家Japan
城市Yokohama
期間28/06/051/07/05

指紋 深入研究「ADEPTS: Adaptive intrusion response using attack graphs in an e-commerce environment」主題。共同形成了獨特的指紋。

引用此