Return to search

A generic software architecture for deception-based intrusion detection and response systems

Approved for public release; distribution is unlimited / Today, intrusion detection systems provide for detecting intrusive patterns of interaction. Although the responses of such systems are typically limited to primitive actions, they can be supplemented with deception-based strategies. We propose a generic software architecture combining intrusion detection and deceptive response capabilities in a uniform structure. Detecting and responding to attacks are realized via runtime instrumentation of kernel-based modules. The architecture provides for dynamically adjusting system performance to maintain continuity and integrity of both legitimate services and security activities. / Lieutenant Junior Grade, Turkish Navy

Identiferoai:union.ndltd.org:nps.edu/oai:calhoun.nps.edu:10945/1053
Date03 1900
CreatorsUzuncaova, Engin
ContributorsMichael, James Bret, Riehle, Richard, Computer Science, Software Engineering
PublisherMonterey, California. Naval Postgraduate School
Source SetsNaval Postgraduate School
Detected LanguageEnglish
TypeThesis
Formatxvi, 67 p. : ill. ;, application/pdf
RightsThis publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. As such, it is in the public domain, and under the provisions of Title 17, United States Code, Section 105, may not be copyrighted.

Page generated in 0.002 seconds