Information Assurance

13.8. Conclusion

In this chapter, we present the motivation for designing IRSs for distributed systems. We lay out the design challenges in designing and implementing IRSs. Then, we present existing work in the field, classified into four classes. The first category of IRSs, called static decision making, provides a static mapping of the alert from the detector to the response that is to be deployed. The second class, called dynamic decision making, reasons about an ongoing attack based on the observed alerts and determines an appropriate response to take. The third class, called intrusion tolerance through diverse replicas, provides masking of security failures through the use of diverse replicas concurrently for performing security critical ...