The Search for Efficiency in Automated Intrusion Response for Distributed Applications

Distributed systems comprising multiple services interacting among themselves to provide end-user functions are becoming an increasingly important platform. Many of the platforms, such as distributed e-commerce systems, have huge financial stakes involved in them. This has long led to interest in securing distributed systems through detection of intrusions and of late, through automated responses to intrusions. The rudimentary response mechanisms often bundled with anti-virus or Intrusion Detection System (IDS) products overwhelmingly consider only immediate local responses that are directly suggested by the detected symptom.