Automatic Response to Intrusion Detection

2004

Masteroppgave i informasjons- og kommunikasjonsteknologi 2004 - Høgskolen i Agder, Grimstad Attacks on computer systems are a growing problem. According to CERT there where 137,529 reported incidents in 2003 in contrast to 82,094 reported incidents in 2002. As the numbers of incidents grow, the work of applying countermeasures to the incidents will take more and more of the system administrator’s time. To ease this job an automated Intrusion Response System (IRS) could handle some of the incident and apply the right countermeasure. An IRS is dependent on an Intrusion Detection System (IDS), and applies responses on the incidents reported by the IDS. These responses can range from logging th…