A Framework for Adaptive Secure Information System

We are facing increasing threats and vulnerability on the Internet. Conventional intrusion detection techniques are not sufficient, especially for new attacks. Thus, it is necessary to adopt intrusion tolerance techniques. However, sophisticated intrusion tolerance techniques may provide better security, but also incur performance penalties. In this paper, we propose an adaptive intrusion tolerance framework to balance the tradeoff between security protection and performance overhead. We use intrusion detection systems to collect and evaluate the threat situations. Then, we develop multiple levels of protection mechanisms and the adaptive protocols that can switch protection mechanisms on-the-fly according to the threat level.