Tracing Based Active Intrusion Response
Xinyuan Wang, Douglas S. Reeves, S. Felix Wu · 2002
Network-based intrusion has become a serious threat to today's highly networked information systems, existing intrusion defense approaches such as intrusion prevention, detection, tolerance and response are ')9assire" in response to network-based intrusions in that their countermeasures are limited to being local to the intrusion target and there is no automated, network-wide counteraction against detected intrusions. While they all play an important role in counteracting network-based intrusion, they do not, however, effectively address the root cause of the problem - intruders.