Innovative Cyber-Security Metrics for Intrusion Prevention

Network services are becoming more developed and sophisticated to maintain secure. It is extremely critical to preserve system’s availability and user’s quality of experience. Also it is noticeable that, attackers are becoming more intelligent too. Consequently, it seems necessary to do intrusion prevention in computer networks. Because of the inevitable parameter cost, network hardening should be done in a cost effective manner. So, applying the best security measure is not possible but with being provided with some security metrics for finding the most perilous attacks and also a criteria for security improvement assessment when applying different countermeasures. In this paper we proposed an intrusion prevention model which makes finding the most disastrous vulnerabilities and security improvement estimation possible. Also, one cost model is proposed which helps the security administrators to quantify the cost of possible network hardening methods.