Intrusion response cost assessment methodology

In this paper we present a structured methodology for evaluating cost of responses based on three factors: the response operational cost associated with the daily maintenance of the response, the response goodness that measures the applicability of the selected response for a detected intrusion and the response impact on the system that refers to the possible response effect on the system functionality. The proposed approach provides consistent basis for response evaluation across different systems while incorporating security policy and properties of specific system environment. Categories and Subject Descriptors C.2.0 [Computer-Communication Networks]: Security and protection General Terms Security Keywords intrusion response assessment, cost-sensitive intrusion response

• Type: Conference
• Year: 2009
• Where: CCS
• Authors: Chris Strasburg, Natalia Stakhanova, Samik Basu, Johnny S. Wong
• Keywords: CCS 2009, Cost-sensitive Intrusion Response, Keywords Intrusion Response, Response Operational Cost, Security Privacy