Validating GrADAR - an Approach for graph-based automated DoS attack response

This contribution presents validation results of an intuitive approach named `GrADAR´ for automatically selecting response measures to DoS attacks. It creates and maintains a model of a computer network and of the availability of its resources from the observations of deployed monitoring systems. The graph-based model is able to express both the effects of DoS attacks and response measures as reactions to the attacks. Certain properties of the model graphs are utilized to determine different metrics which are well-known from the pragmatic decisions of network security officers.