The Research on Enhanced Cost-Based Auto Intrusion Response Decision

The problem in tradition´s intrusion response decision models is cost depends on experience, being in need of objectivity. The cost factor responds to the decision is less, causing the judgments not enough reasonable under the some condition. Response do not involve the choice of optimal strategy, the accuracy of judgment to respond or not is not enough high and lack of response adjustment. Aiming at this shortage, the author puts forward the analysis model EC-SM of the enhanced cost-based decision. This paper mainly gave two core contents of response decision: choice of optimal response strategy and respond to or not decision. The results of experiment show that the decision result of this model has a higher correctness.