|
Published Articles >> Table of Contents >> Abstract
16th Annual Computer Security Applications Conference (ACSAC'00)
p. 11
Security agility in response to intrusion detection
M. Petkac, NAI Labs., USA
L. Badger, NAI Labs., USA
Full Article Text:
  
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/ACSAC.2000.898853
Send link to a friend
| Abstract |
|
Cooperative frameworks for intrusion detection and response exemplify a key area of today's computer research: automating defenses against malicious attacks that increasingly are taking place at grander speeds and scales to enhance the survivability of distributed systems and maintain mission critical functionality. At the individual host-level, intrusion response often includes security policy reconfiguration to reduce the risk of further penetrations. However, runtime policy changes may cause traditional software components, designed without (dynamic) security in mind, to fail in varying degrees, including termination of critical processes. This paper presents security agility, a strategy to provide software components with the security awareness and adaptability to address runtime security policy changes, describes how security agility is packaged in a prototype toolkit and illustrates how the toolkit can be integrated with intrusion detection and response frameworks to help automate flexible host-based response to intrusions.
|
 Additional Information
|
Index Terms- security of data; distributed processing; security agility; intrusion detection; cooperative frameworks; malicious attacks; distributed systems; mission critical functionality; security policy reconfiguration; software components; runtime security policy change; prototype toolkit; flexible host-based response
Citation:
M. Petkac, L. Badger,
"Security agility in response to intrusion detection,"
acsac,
p. 11,
16th Annual Computer Security Applications Conference (ACSAC'00),
2000
|
|
