A taxonomy of intrusion response systems

TLDR

Recent advances in intrusion detection have highlighted the need for automated, dynamic response mechanisms, as manual administrator-triggered defenses cannot keep pace with the increasing complexity and speed of attacks, yet research on intrusion response remains fragmented. This work introduces a taxonomy of intrusion response systems and reviews current research trends in the field. The authors outline essential features that an ideal intrusion response system should possess.

Abstract

Recent advances in the field of intrusion detection brought new requirements to intrusion prevention and response. Traditionally, the response to an attack is manually triggered by an administrator. However, increased complexity and speed of the attack-spread during recent years show acute necessity for complex dynamic response mechanisms. Although intrusion detection systems are being actively developed, research efforts in intrusion response are still isolated. In this work we present a taxonomy of intrusion response systems, together with a review of current trends in intrusion response research. We also provide a set of essential features as a requirement for an ideal intrusion response system.