Article citationsMore>>

Kanoun, W., Cuppens-Boulahia, N., Cuppens, F. and Dubus, S. (2010) Risk-Aware Framework for Activating and Deactivating Policy-Based Response. 4th International Conference on Network and System Security, Melbourne, 1-3 September 2010, 207-215.

has been cited by the following article:

• TITLE: False Positive Responses Optimization for Intrusion Detection System

  AUTHORS: Jalal Baayer, Boubker Regragui, Aziz Baayer

  KEYWORDS: Cost Model; Intrusion Detection System; False Positive; False Negative; Damage Costs and Optimization

  JOURNAL NAME: Journal of Information Security, Vol.5 No.2, February 20, 2014

  ABSTRACT: In Intrusion Detection Systems (IDS), the operation costs represent one of the big challenges for researchers. They are apart from the IDS cost acquisition and they comprise the costs of maintenance, administration, response, running and errors reactions costs. In the present paper, we focus on the missed reactions which include False Positive (FP) and False Negative (FN) reactions. For that a new optimization cost model is proposed for IDS. This optimization proposes a minimal interval where the IDSs work optimally. In simulation, we found this interval as a trade-off between the damage costs and the FP.