一种代价估算规则在入侵响应系统中的应用  

COST-BASED ADAPTIVE INTRUSION RESPONSE SYSTEM

作　　者：党圣鸣[1] 何湘岩[1] 

机构地区：[1]河北建材职业技术学院信息机电系,河北秦皇岛066004

出　　处：《陕西科技大学学报（自然科学版）》2009年第5期110-113,共4页Journal of Shaanxi University of Science & Technology

摘　　要：代价估算问题是入侵响应中成本分析的重要依据,因此也是影响入侵响应系统是否做出响应决策的关键问题.作者在分析了现有Northcutt的损失代价估算方法并对其代价估算规则进行了总结的基础上,提出了一种新的代价估算准则,并将基于该代价准则的成本分析模块应用到入侵响应系统中设计了基于成本分析的入侵响应系统,进而对该响应系统进行了损失代价估算、响应代价的估算,结果表明该项应用能够合理有效的利用有限的系统资源.Evaluation of the cost is the important base of the cost-sensitive in the intrusion response system,so it is also the critical point for making a response determination in intrusion response system.After analyzing existing the cost evaluation method——Northcutt and summarizing its rules,this paper presents a new cost revaluation rule which could be applied to the cost-sensitive model in the intrusion response system,and estimate this system about loss cost revaluation and response cost revaluation.Then it conclude that this application can make full use of the limited resources efficiently and rationally in the system from the result of comparison and analysis.

关 键 词：代价估算 成本分析 入侵响应 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]