Information Assurance

13.3. Dynamic Decision-Making Systems

13.3.1. Broad Research Issues

Dynamic decision-making-based IRS involves the process of reasoning about an ongoing attack based on observed alerts and determining an appropriate response to take. There have been various designs and architectures proposed for this kind of dynamic decision-making-based IRS system. However, the core issue underlying all these systems is how the decision making should be achieved. Many factors can contribute to and complicate the decision-making process. For instance, a response can come with a certain cost such as the computation resource required for executing the response and the negative impact on the system after the execution of this response. Also, a response can fail ...