ADEPTS: Adaptive Intrusion Response Using Attack Graphs in an E-Commerce Environment

Get BibTex-formatted data

Download

PDF

Author

B Foo, Y Wu, Y Mao, S Bagchi, E Spafford

Entry type

conference

Abstract

Distributed systems with multiple interacting services, especially e-commerce systems, are suitable targets for malicious attacks because of the potential financial impact. Compared to intrusion detection, automated response has received relatively less attention. In this paper, we present the design of automated response mechanisms in an intrusion tolerant system called ADEPTS. Our focus is on enforcing containment in the system, thus localizing the intrusion and allowing the system to provide service, albeit degraded. ADEPTS uses a graph of intrusion goals, called IGRAPH, as the underlying representation in the system. In response to alerts from an intrusion detection framework, ADEPTS executes algorithms to determine the spread of the intrusion and the appropriate responses to deploy. A feedback mechanism evaluates the success of a deployed response and uses that in guiding future choices. ADEPTS is demonstrated on a distributed e-commerce system and evaluated using a survivability metric.

Download

PDF

Date

2005

URL

http://cobweb.ecn.purdue.edu/~ ... l_adepts_dsn05_submit.pdf

Journal

2005 International Conference on Dependable Systems and Networks

Key alpha

Spafford

Publication Date

2005-01-01

BibTex-formatted data

To refer to this entry, you may select and copy the text below and paste it into your BibTex document. Note that the text may not contain all macros that BibTex supports.

@Conference{ Spafford,
	title = "ADEPTS: Adaptive Intrusion Response Using Attack Graphs in an E-Commerce Environment ",
	author = "B Foo, Y Wu, Y Mao, S Bagchi, E Spafford",
	year = "2005",
	journal = "2005 International Conference on Dependable Systems and Networks",
	abstract = "Distributed systems with multiple interacting services, especially e-commerce systems, are suitable targets for malicious attacks because of the potential financial impact. Compared to intrusion detection, automated response has received relatively less attention. In this paper, we present the design of automated response mechanisms in an intrusion tolerant system called ADEPTS. Our focus is on enforcing containment in the system, thus localizing the intrusion and allowing the system to provide service, albeit degraded. ADEPTS uses a graph of intrusion goals, called IGRAPH, as the underlying representation in the system. In response to alerts from an intrusion detection framework, ADEPTS executes algorithms to determine the spread of the intrusion and the appropriate responses to deploy. A feedback mechanism evaluates the success of a deployed response and uses that in guiding future choices. ADEPTS is demonstrated on a distributed e-commerce system and evaluated using a survivability metric.",
	url = "http://cobweb.ecn.purdue.edu/~dcsl/publications/papers/2005/final_adepts_dsn05_submit.pdf",
}