GSAL ::
Projects ::
Assessment of intrusion detection systems (RIDAX)
This project aims at the assessment of individual IDSs
(intrusion detection systems) and arbitrary combinations
thereof. Each IDS type has very specific strengths and
weaknesses and provides its findings be means of alarms whose
semantics are determined by the IDS and the way it
operates.
This project defines metrics that permit the assessment of
the following aspects:
- Completeness: The protection provided by an
individual IDSs and arbitrary combinations thereof.
- Utility: The utility of the information
provided by IDSs.
- Reliability: The impact of a failing
components.
The automated assessment (RIDAX) is made at a generic and
conceptual level. It is based on generic descriptions of IDSs and
thereby focuses on the capabilities of IDSs that stem from
the techniques and methods used rather than on the specific set of
signatures an IDS provides at a given point in time.
