Adaptive System Security Policies

Abstract : This contract final technical report documents the Adaptive System Security Policies project results. This project extended concepts developed in the Dynamic Cooperating Boundary Controllers project, which developed the initial version of the Intruder Detection and Isolation Protocol (IDIP). IDIP provides an infrastructure for intruder tracking and containment. The focus of the extensions developed under the Adaptive System Security Policies was to provide some policy control over IDIP responses to ensure that the damage caused by the response is no more than the damage caused by the intruder. This report provides an overview of the current IDIP implementation and focuses on policy control for automated response.