A fuzzy taxonomic approach for classifying and identifying system attacks and automating attack response

  • Authors:
  • Gregory Vert;Rene Doursat

  • Affiliations:
  • Department of Computer Science, University of Nevada, Reno, Reno, NV;Department of Computer Science, University of Nevada, Reno, Reno, NV

  • Venue:
  • CIMMACS'05 Proceedings of the 4th WSEAS international conference on Computational intelligence, man-machine systems and cybernetics
  • Year:
  • 2005

Quantified Score

Hi-index 0.00

Visualization

Abstract

Initial identification of attacks on computer systems is crucial to defending against them. A detailed classification system gives system administrators a tool for combating these attacks in the most effective fashion by providing them with a specific path of action. There exists a tremendously wide range of attacks and defending against these requires an almost encyclopedic knowledge of their attributes and signatures. By relying on taxonomies that place entities in ever smaller and more precise groups, the user can rapidly identify common features and properties. However, different attacks can have similar attributes that can confuse classification. Therefore, we propose to use fuzzy logic both in the classification of attacks and an automated attack response system based on the selection of action rules.