@inproceedings{4f0c451d88a54b3c99858ad10e858685,
title = "Online risk assessment of intrusion scenarios using D-S evidence theory",
abstract = "In the paper, an online risk assessment model based on D-S evidence theory is presented. The model can quantitate the risk caused by an intrusion scenario in real time and provide an objective evaluation of the target security state. The results of the online risk assessment show a clear and concise picture of both the intrusion progress and the target security state. The model makes full use of available information from both IDS alerts and protected targets. As a result, it can deal with uncertainties and subjectiveness very well in its evaluation process. In IDAM\&IRS, the model serves as the foundation for intrusion response decision-making.",
keywords = "Alert processing, D-S evidence theory, Intrusion detection, Intrusion response, Online risk assessment",
author = "Mu, \{C. P.\} and Li, \{X. J.\} and Huang, \{H. K.\} and Tian, \{S. F.\}",
year = "2008",
doi = "10.1007/978-3-540-88313-5\_3",
language = "English",
isbn = "3540883126",
series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",
publisher = "Springer Verlag",
pages = "35--48",
booktitle = "Computer Security - ESORICS 2008 - 13th European Symposium on Research in Computer Security, Proceedings",
address = "Germany",
note = "13th European Symposium on Research in Computer Security, ESORICS 2008 ; Conference date: 06-10-2008 Through 08-10-2008",
}