Research On The Advanced Model Of Automated Intrusion Response Based On The Intrusion Prediction

As the Internet spread widely and rapidly in recent years, people have relied on the Internet increasingly, and network security has increasingly become one of the focused social problems. Intrusion Detection System (IDS), an effective system security technology, provides the real-time detection and protection both inside network and outside.The intrusion detection and intrusion response are important part of the IDS. At the present time, many researches are paid attention to the intrusion detection technology, however, the part of intrusion response is developed very slowly, which rest on manual response. But it is important to the IDS to react the attacks as soon as possible.Presently, there are three kinds of intrusion response: warning and informing, manual response, automated response. Since the automated response is able to take timely countermeasures to stop the attacks and decrease the loss of systems, it becomes the best one, even the hotspot now. But current IDS can not predict attacks, nor provide an earlier warning. They report an alert after it has happened, and because of the false positive of the IDS, the intrusion response often take action to the attack which does not happened in fact, which could exhaust resource of the system, even break down the machine.In the thesis, author firstly sketched the current research on intrusion response,...