Simulating adversarial interactions between intruders and system administrators using OODA-RR

Autor: Jan H. P. Eloff, Hein S. Venter, T. J. Grant
Rok vydání: 2007
Předmět:
Zdroj: SAICSIT
DOI: 10.1145/1292491.1292497
Popis: Intrusion in information systems is a major problem in security management. Present-day intrusion detection systems detect attacks too late to counter them in real-time. Several authors in the digital forensics literature have proposed using Boyd's Observe-Orient-Decide-Act (OODA) model for intrusion protection, but none have taken these proposals further. This paper reports on hand-simulation of the adversarial interaction between an intruder and a system administrator intended to demonstrate the feasibility of implementing a rationally reconstructed OODA (OODA-RR) model. An OODA-RR test-bed is currently being implemented.
Databáze: OpenAIRE