Abstract
In recent years, we have seen a number of successful attacks against high-profile targets, some of which have even caused severe physical damage. These examples have shown us that resourceful and determined attackers can penetrate virtually any system, even those that are secured by the \air-gap."Consequently, in order to minimize the impact of stealthy attacks, defenders have to focus not only on strengthening the first lines of defense but also on deploying effective intrusiondetection systems. Intrusion-detection systems can play a key role in protecting sensitive computer systems since they give defenders a chance to detect and mitigate attacks before they could cause substantial losses. However, an oversensitive intrusion-detection system, which produces a large number of false alarms, imposes prohibitively high operational costs on a defender since alarms need to be manually investigated. Thus, defenders have to strike the right balance between maximizing security and minimizing costs. Optimizing the sensitivity of intrusion detection systems is especially challenging in the case when multiple interdependent computer systems have to be defended against a strategic attacker, who can target computer systems in order to maximize losses and minimize the probability of detection. We model this scenario as an attacker-defender security game and study the problem of finding optimal intrusion detection thresholds.
Original language | English (US) |
---|---|
Pages | 72-81 |
Number of pages | 10 |
DOIs | |
State | Published - 2016 |
Event | Symposium and Bootcamp on the Science of Security, HotSos 2016 - Pittsburgh, United States Duration: Apr 19 2016 → Apr 21 2016 |
Conference
Conference | Symposium and Bootcamp on the Science of Security, HotSos 2016 |
---|---|
Country/Territory | United States |
City | Pittsburgh |
Period | 4/19/16 → 4/21/16 |
All Science Journal Classification (ASJC) codes
- Software
- Human-Computer Interaction
- Computer Vision and Pattern Recognition
- Computer Networks and Communications