Intrusion response based on SVM cost-sensitive decision model
Min Sun · Journal of Computer Applications · 2007
Traditional intrusion detection model only considers attack damage and response cost.In this study,two important factors in decision process,the property value of attack target and the response risk were added,and the calculation methods with each cost were analyzed.Moreover,a method for assessing attack target as the immaterial asset was proposed and the process that adopted support vector machine(SVM)model to set up the analysis model of the cost decision was described in detail.At last,according to the daily record,the experimental results show that the decision result of this model has higher accuracy.