Academia.eduAcademia.edu

Figure 1 – uploaded by Montaceur Zaghdoud

See full PDFdownloadDownload figure
Figure 1: Intrusion Response Strategy The second step is charged by defining possible damages caused by intrusion on victim computer/information system using fuzzy cognitive map which describes possible influences between components of victim system. The third and final step of proposed response strategy should make valuable direct (automated) or indirect (not automated) response by sending advising message to system administrator or by charging mobile agents by appropriate remedies and correctives.

Figure 1 Intrusion Response Strategy The second step is charged by defining possible damages caused by intrusion on victim computer/information system using fuzzy cognitive map which describes possible influences between components of victim system. The third and final step of proposed response strategy should make valuable direct (automated) or indirect (not automated) response by sending advising message to system administrator or by charging mobile agents by appropriate remedies and correctives.

Related Figures (4)

In this paper, we use conceptual graph to represent intrusion relationships which can show possible relation between intrusion and type or class of intrusion (DOS, PROBING, U2R, R2U). Figure 4 shows an illustration of this application. It describes relationship between concepts: Iswep, Mscan, Nmap, Saint and satan are types of intrusion class probing. Probing is a class of Intrusions.
In this paper, we use conceptual graph to represent intrusion relationships which can show possible relation between intrusion and type or class of intrusion (DOS, PROBING, U2R, R2U). Figure 4 shows an illustration of this application. It describes relationship between concepts: Iswep, Mscan, Nmap, Saint and satan are types of intrusion class probing. Probing is a class of Intrusions.
Conversely, eij<0 denotes negative causality— whenever concept Ci increases, there is a decrease in Cj by the degree eij. The higher the absolute value for eij, the greater the effect of the cause. FCMs can be successfully used to capture causal knowledge and to support causal inference[21]. A FCM graph can be equivalently defined by a square matrix, called connection matrix, which stores all weight values for edges between corresponding concepts represented by rows and columns. The system of n nodes can be represented by nxn connection matrix [36]. An example of FCM model and its connection matrix are shown as follow:
Conversely, eij<0 denotes negative causality— whenever concept Ci increases, there is a decrease in Cj by the degree eij. The higher the absolute value for eij, the greater the effect of the cause. FCMs can be successfully used to capture causal knowledge and to support causal inference[21]. A FCM graph can be equivalently defined by a square matrix, called connection matrix, which stores all weight values for edges between corresponding concepts represented by rows and columns. The system of n nodes can be represented by nxn connection matrix [36]. An example of FCM model and its connection matrix are shown as follow:
Ivean Balepinet et al. developed a system map which represents dependencies between the resources. If an edge is directed from node A to node B, it means that A provides some service to B, B depends on A, and, most likely, A produces information that B consumes [3]. Figure 7: Fuzzy cognitive map of mutual intrusion negative influences .
Ivean Balepinet et al. developed a system map which represents dependencies between the resources. If an edge is directed from node A to node B, it means that A provides some service to B, B depends on A, and, most likely, A produces information that B consumes [3]. Figure 7: Fuzzy cognitive map of mutual intrusion negative influences .
Related topics:
Information SecurityComputer SecurityMobile AgentIntrusion Response System
580 California St., Suite 400
San Francisco, CA, 94104
© 2025 Academia. All rights reserved