Study Of Automated Intrusion Response

With the development of network and information, security problems become more important. As the frequency of network security incidents, incident response has been focused on. With a large amount of network attacks, the automated intrusion response system can take timely countermeasures to stop attacks and reduce the loss of system. Based on the summary of related studies, this paper presents a common framework for the automated intrusion response system.In addition, the summary of our work is given in this paper, which includes the study of classification of network security incidents and the cost analysis for response. These tow aspects have a significant role for the building of the incident response system. We have done a lot of research in this field since it is the foundation of our farther works.