False Positive Responses Optimization for Intrusion Detection System

• 作者: Aziz Baayer Boubker Regragui Jalal Baayer
• 来源期刊: 信息安全(英文)
• 学科: 工学
• 关键词: COST Model INTRUSION Detection System False Positive False NEGATIVE Damage COSTS and OPTIMIZATION
• 年，卷（期）: 2014,（2）
• 页码范围: 19-36
• 页数: 18页
• 分类号: TP39

摘要

In Intrusion Detection Systems (IDS), the operation costs represent one of the big challenges for researchers. They are apart from the IDS cost acquisition and they comprise the costs of maintenance, administration, response, running and errors reactions costs. In the present paper, we focus on the missed reactions which include False Positive (FP) and False Negative (FN) reactions. For that a new optimization cost model is proposed for IDS. This optimization proposes a minimal interval where the IDSs work optimally. In simulation, we found this interval as a trade-off between the damage costs and the FP.