A Deployment Value Model for Intrusion Detection Sensors

Authors:
Siraj A. Shaikh;Howard Chivers;Philip Nobles;John A. Clark;Hao Chen
Affiliations:
Department of Informatics and Sensors, Cranfield University, Shrivenham, UK;Department of Informatics and Sensors, Cranfield University, Shrivenham, UK;Department of Informatics and Sensors, Cranfield University, Shrivenham, UK;Department of Computer Science, York University, York, UK;Department of Computer Science, York University, York, UK
Venue:
ISA '09 Proceedings of the 3rd International Conference and Workshops on Advances in Information Security and Assurance
Year:
2009

Citing 8
Cited 1

Toward cost-sensitive modeling for intrusion detection and response

Journal of Computer Security
Automated Generation and Analysis of Attack Graphs

SP '02 Proceedings of the 2002 IEEE Symposium on Security and Privacy
The Value of Intrusion Detection Systems in Information Technology Security Architecture

Information Systems Research
A formal approach to sensor placement and configuration in a network intrusion detection system

Proceedings of the 2006 international workshop on Software engineering for secure systems
A Cost-Sensitive Model for Preemptive Intrusion Response Systems

AINA '07 Proceedings of the 21st International Conference on Advanced Networking and Applications
Optimal IDS Sensor Placement and Alert Prioritization Using Attack Graphs

Journal of Network and Systems Management
Intrusion Detection: Characterising intrusion detection sensors

Network Security
Intrusion Detection: Characterising intrusion detection sensors, part 2

Network Security

Intrusion Detection: Towards scalable intrusion detection

Network Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

The value of an intrusion detection sensor is often associated with its data collection and analysis features. Experience tells us such sensors fall under a range of different types and are diverse in their operational characteristics. There is a need to examine some of these characteristics to appreciate the value they add to intrusion detection deployments. This paper presents a model to determine the value derived from deploying sensors, which serves to be useful to analyse and compare intrusion detection deployments.