自适应入侵响应系统响应效果评价研究  

Evaluation of response effectiveness of adaptiveintrusion response systems

作　　者：王慧强[1] 徐东[1] 曹翊晅[1] 

机构地区：[1]哈尔滨工程大学计算机科学与技术学院,黑龙江哈尔滨150001

出　　处：《哈尔滨工程大学学报》2004年第5期639-643,共5页Journal of Harbin Engineering University

基　　金：国防预研重点资助项目(413150702);武备预研基金资助项目(51416060104CB0101).

摘　　要：入侵响应系统对入侵做出响应,尝试减缓/制止入侵,保护系统关键数据和关键服务并尝试恢复系统,然而至今尚缺乏对响应结果进行系统评估的机制.针对当前入侵响应系统存在的这一缺点提出了一种评价入侵效果的系统方法.首先给出了响应效果评价模型,然后结合实例进行了模型应用分析.结果表明,可以把评价结果作为入侵响应系统制定响应方案的关键依据之一,从而提高系统的自适应性.Intrusion response systems respond to intrusions and try to slow down or stop intrusion and protect critical information and services of the protected system. However, what is lacking is a mechanism for evaluating the response results. A systemic methodology is proposed, which evaluates response results in order to avoid the disadvantage of concurrent intrusion response systems. And a response effectiveness evaluation model was presented and applied to a case study. The evaluation results can be used as a key factor for making a response plan and improving the adaptability of adaptive intrusion response systems.

关 键 词：入侵响应 恢复系统 自适应性 系统评估 系统响应 数据 模型 效果评价 

分 类 号：N945.1[自然科学总论—系统科学] TP393[自动化与计算机技术—计算机应用技术]