Automatic Response to Intrusion

Abstract : This contract final technical report documents the Automated Response to Intrusion project results. This project extended concepts developed in the Dynamic Cooperating Boundary Controllers project, which developed the initial version of the Intruder Detection and Isolation Protocol (IDIP). IDIP provides an infrastructure for intruder tracking and containment. The focus of the extensions developed under the Automated Response to Intrusions project was to integrate the IDIP technology with selected security technologies to improve the effectiveness of the intrusion response system. This work also leveraged results from the Adaptive System Security Policies contract. This report provides an overview of the current IDIP implementation and the results of this contract. It also provides references to IDIP documentation and technical papers where more detail can be found on the IDIP implementation and architecture.