Balancing Safety Against Performance: Tradeoffs in Internet Security

All Internet-accessible computing systems are currently faced with incessant threats ranging from simple scriptkiddies to highly sophisticated criminal enterprises. In response to these threats, sites must perform extensive intrusion monitoring. This intrusion monitoring can have significant costs in terms of bandwidth, computing power, storage space, and licensing fees. Furthermore, when exploits are detected, the victims must take actions that can consume further resources and compromise their objectives (e.g., by reducing e-commerce server throughput). In this paper, we explore techniques for modeling the costs and benefits of various security monitoring and response actions. Given these models and stochastic expectations about the types of attacks that a site is likely to face, our CIRCADIA automatic security control system is able to make real-time tradeoffs between the level of safety and security that is enforced, and the level of system resources/performance that are applied ...

• Type: Conference
• Year: 2003
• Where: HICSS
• Authors: Vu A. Ha, David J. Musliner
• Keywords: Biometrics, Extensive Intrusion Monitoring, HICSS 2003, Internet-accessible Computing Systems, Intrusion Monitoring, System Sciences