Intelligent response system to mitigate the success likelihood of ongoing attacksReport as inadecuate

Intelligent response system to mitigate the success likelihood of ongoing attacks - Download this document for free, or read online. Document in PDF available to download.

1 LUSSI - Département Logique des Usages, Sciences sociales et Sciences de l-Information 2 Alcatel-Lucent Bell Labs France Nozay 3 Lab-STICC TB CID SFIIS Lab-STICC - Laboratoire des sciences et techniques de l-information, de la communication et de la connaissance UMR 3192

Abstract : Intrusion response models and systems have been recently an active field in the security research. These systems rely on a fine diagnosis to perform and optimize their response. In particular, previous papers focus on balancing the cost of the response with the impact of the attack. In this paper, we present a novel attack response system, based on the assessment of the likelihood of success of attack objectives. First, the ongoing potential attacks are identified, and their success likelihood are calculated dynamically. The success likelihood depends mainly on the progress of the attack and the state of the monitored system. Second, candidate countermeasures are identified, and their effectiveness in reducing the pre-calculated success likelihood are assessed. Finally, the candidate countermeasures are prioritized.

Keywords : Success likelihood Response Attack objective Dynamic Markol model

Author: Wael Kanoun - Nora Cuppens-Boulahia - Frédéric Cuppens - Samuel Dubus - Antony Martin -



Related documents