Automated Intrusion Response Decision Based on the Analytic Hierarchy Process

The traditional intrusion detection systems (IDSs) play an important role in monitoring our network, but they lack abilities in automated intrusion response. Nowadays with the rapidly increased complexity and speed of the attacks spread, there has an urgent need in automated intrusion response. This field has already aroused wide concern. The main obstacle now lies in that accurate measurement of those factors related to response decision is a big challenge. As the analytic hierarchy process (AHP) uses pairwise comparison to those influence factors, it avoids the problems of accurate quantification. This paper presents a response decision manner based on the AHP, and gives a detail description in the hierarchy built, the criterions selected, the matrixes listed, and the weights calculated. Empirical experiments show that our manner is practicable.