Optimal Monitoring Policy for a Server System Considering Signature Update  
Author Mitsuhiro Imaizumi

 
Co-Author(s) Mitsutaka Kimura

 
Abstract Cyber attack on the Internet has become a problem in recent years, and it has been becoming more sophisticated and complicated. As one of schemes to detect cyber attack, IDS has been widely used. IDS can detect cyber attack based on the signature which is the pattern of cyber attack and so on. In order to detect a new type of attacks, signature update is needed. This paper considers a stochastic model for a server system with signature update. The server has the function of IDS. In this model, we consider type II error where IDS judges the occurrence of cyber attack erroneously when it occurs. We obtain the expected cost until cyber attack is detected and discuss the optimal policy which minimizes it. Finally, numerical examples are given.

 
Keywords Cyber attack, Signature, Erroneous detection, Optimal policy
   
    Article #:  RQD25-48
 
Proceedings of 25th ISSAT International Conference on Reliability & Quality in Design
August 1-3, 2019 - Las Vegas, NV, U.S.A.