<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01518222</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T14:15:33+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">A Response Strategy Model for Intrusion Response Systems</title>
            <author role="aut">
              <persName>
                <forename type="first">Nor</forename>
                <forename type="middle">Badrul</forename>
                <surname>Anuar</surname>
              </persName>
              <email type="md5">026b8331ad0ba6a9900eecb6d460111f</email>
              <email type="domain">cscan.org</email>
              <idno type="idhal" notation="numeric">1007465</idno>
              <idno type="halauthorid" notation="string">1167107-1007465</idno>
              <affiliation ref="#struct-467098"/>
              <affiliation ref="#struct-312763"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Maria</forename>
                <surname>Papadaki</surname>
              </persName>
              <email type="md5">026b8331ad0ba6a9900eecb6d460111f</email>
              <email type="domain">cscan.org</email>
              <idno type="idhal" notation="numeric">1007465</idno>
              <idno type="halauthorid" notation="string">581363-1007465</idno>
              <affiliation ref="#struct-467098"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Steven</forename>
                <surname>Furnell</surname>
              </persName>
              <email type="md5">026b8331ad0ba6a9900eecb6d460111f</email>
              <email type="domain">cscan.org</email>
              <idno type="idhal" notation="numeric">1007465</idno>
              <idno type="halauthorid" notation="string">1061211-1007465</idno>
              <affiliation ref="#struct-263537"/>
              <affiliation ref="#struct-467098"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Nathan</forename>
                <forename type="middle">L.</forename>
                <surname>Clarke</surname>
              </persName>
              <idno type="halauthorid">1167108-0</idno>
              <affiliation ref="#struct-467098"/>
              <affiliation ref="#struct-494265"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-05-04 13:45:20</date>
              <date type="whenModified">2017-05-04 14:53:55</date>
              <date type="whenReleased">2017-05-04 14:53:55</date>
              <date type="whenProduced">2012-06-12</date>
              <date type="whenEndEmbargoed">2015-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01518222v1/document">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01518222v1/file/978-3-642-30436-1_51_Chapter.pdf" id="file-1518222-1579102">
                <date notBefore="2015-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-30436-1_51.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01518222</idno>
            <idno type="halUri">https://inria.hal.science/hal-01518222</idno>
            <idno type="halBibtex">anuar:hal-01518222</idno>
            <idno type="halRefHtml">&lt;i&gt;27th Information Security and Privacy Conference (SEC)&lt;/i&gt;, Jun 2012, Heraklion, Crete, Greece. pp.573-578, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-30436-1_51"&gt;&amp;#x27E8;10.1007/978-3-642-30436-1_51&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">27th Information Security and Privacy Conference (SEC), Jun 2012, Heraklion, Crete, Greece. pp.573-578, &amp;#x27E8;10.1007/978-3-642-30436-1_51&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1518222-1579102"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
            <idno type="stamp" n="IFIP-AICT-376" corresp="IFIP-AICT">Information Security and Privacy Research</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 13: Short Papers</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">A Response Strategy Model for Intrusion Response Systems</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Nor</forename>
                    <forename type="middle">Badrul</forename>
                    <surname>Anuar</surname>
                  </persName>
                  <email type="md5">026b8331ad0ba6a9900eecb6d460111f</email>
                  <email type="domain">cscan.org</email>
                  <idno type="idhal" notation="numeric">1007465</idno>
                  <idno type="halauthorid" notation="string">1167107-1007465</idno>
                  <affiliation ref="#struct-467098"/>
                  <affiliation ref="#struct-312763"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Maria</forename>
                    <surname>Papadaki</surname>
                  </persName>
                  <email type="md5">026b8331ad0ba6a9900eecb6d460111f</email>
                  <email type="domain">cscan.org</email>
                  <idno type="idhal" notation="numeric">1007465</idno>
                  <idno type="halauthorid" notation="string">581363-1007465</idno>
                  <affiliation ref="#struct-467098"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Steven</forename>
                    <surname>Furnell</surname>
                  </persName>
                  <email type="md5">026b8331ad0ba6a9900eecb6d460111f</email>
                  <email type="domain">cscan.org</email>
                  <idno type="idhal" notation="numeric">1007465</idno>
                  <idno type="halauthorid" notation="string">1061211-1007465</idno>
                  <affiliation ref="#struct-263537"/>
                  <affiliation ref="#struct-467098"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Nathan</forename>
                    <forename type="middle">L.</forename>
                    <surname>Clarke</surname>
                  </persName>
                  <idno type="halauthorid">1167108-0</idno>
                  <affiliation ref="#struct-467098"/>
                  <affiliation ref="#struct-494265"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>27th Information Security and Privacy Conference (SEC)</title>
                  <date type="start">2012-06-12</date>
                  <date type="end">2012-06-06</date>
                  <settlement>Heraklion, Crete</settlement>
                  <country key="GR">Greece</country>
                </meeting>
                <editor>Dimitris Gritzalis</editor>
                <editor>Steven Furnell</editor>
                <editor>Marianthi Theoharidou</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Information Security and Privacy Research</biblScope>
                  <biblScope unit="volume">AICT-376</biblScope>
                  <biblScope unit="pp">573-578</biblScope>
                  <date type="datePub">2012</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-30436-1_51</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">response strategy model</term>
                <term xml:lang="en">risk response planning</term>
                <term xml:lang="en">intrusion response systems</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>There are several types of security systems, which focus on detecting, mitigating and responding to incidents. Current response systems are largely based on manual incident response selection strategies, which can introduce delays between detection and response time. However, it would be beneficial if critical and urgent incidents are addressed as soon as possible before they jeopardised critical systems. As a result, the Risk Index Model (RIM) has been proposed earlier in our previous study, as a method of prioritising incidents based upon two decision factors namely impact on assets and likelihood of threat and vulnerability. This paper extends RIM by using it as the basis for mapping incidents with various response options. The proposed mapping model, Response Strategy Model (RSM) is based on risk response planning and time management concepts and it is evaluated using the DARPA 2000 dataset. The case study analysis upon the dataset has shown a significant result in mapping incident into different quadrants. In particular, the results have shown a significant relationship between the incident classification with incident priorities where false incidents are likely to be categorised as low priority incidents and true incidents are likely to be categorised as the high priority incident.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-467098" status="INCOMING">
          <orgName>Centre for Security, Communications and Network Research</orgName>
          <orgName type="acronym">CSCAN</orgName>
          <desc>
            <address>
              <addrLine>Room A304, Portland Square, Plymouth University, Drake Circus, Plymouth PL4 8AA, Royaume-Uni</addrLine>
              <country key="GB"/>
            </address>
            <ref type="url">http://www.cscan.org/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-312763" status="VALID">
          <orgName>Faculty of Computer Science and Information Technology [Kuala Lumpur]</orgName>
          <desc>
            <address>
              <country key="MY"/>
            </address>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-263537" status="INCOMING">
          <orgName>School of Computer and Security Science</orgName>
          <desc>
            <address>
              <addrLine>Western</addrLine>
              <country key="AU"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-365391" type="direct"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-494265" status="VALID">
          <orgName>School of Computer and Information Science [Edith Cowan University]</orgName>
          <desc>
            <address>
              <country key="AU"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-466963" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-365391" status="INCOMING">
          <orgName>EDITH COWAN UNIVERSITY</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-466963" status="INCOMING">
          <orgName>Edith Cowan University</orgName>
          <desc>
            <address>
              <addrLine>Perth Western Australia Australia</addrLine>
              <country key="AU"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>