An Impact Assessment Model for Distributed Adaptive Security Situation Assessment
Click here to download now
Overview: The goal of any intrusion detection, anti-virus, firewall or other security mechanism is not simply to stop attacks, but to protect a computing resource so that the resource can continue to perform its function. This paper presents a model of computing resources and of how the loss or degradation of resources impacts the ability of a system to complete its mission. The model is based on ""anytime algorithms"", which relate time to some measure of output quality.