loading...
A Controller-Based Autonomic Defense System
Washington, DC April 22-April 24
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/DISCEX.2003.1194902DARPA Information Survivability Confe ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Derek Armstrong, ALPHATECH, Inc
Sam Carter, ALPHATECH, Inc
Gregory Frazier, ALPHATECH, Inc
Tiffany Frazier, ALPHATECH, Inc
We will be demonstrating the results of our research into the implementation of a host-based Autonomic Defense System (ADS) using a Partially-Observable Markov Decision Process. The goal of an ADS is to "relexively" respond to an attack, thwarting it to the extent that humans have time to form a tactical response to the attack. A defensive system that automatically responds to an attack must meet two criteria: it must select the correct response in the face of an attack, and it must not take actions to attacks that are not there. This challenge is exaccerbated by the fact that, in order to detect never-before-seen attacks, the ADS must use anomally detectors for its sensor input - anomaly detectors typically have relatively high false posiive and falst negative rates. Thus, key to an ADS is a controller that can obtain a valid signal from a noisy sensor.
The ALPHATECH Lightweight Autonomic Defense System (αLADS) is a prototype ADS constructed around a PO-MDP stochastic controller. The state model allows the controller to filter out the false positives from the anomaly sensor such that authorized processes are not killed and false alerts are not issued. We will demonstrate αLADS defending against Internet worms operating in real time.
Citation:
Derek Armstrong, Sam Carter, Gregory Frazier, Tiffany Frazier, "A Controller-Based Autonomic Defense System," discex, vol. 2, pp.21, DARPA Information Survivability Conference and Exposition - Volume II, 2003
Usage of this product signifies your acceptance of the Terms of Use.