Intrusion Reaction Recommendations for Obtaining Reaction CapabilitiesSeptember 1998
A growing threat to Air Force networks and computers is exploitative intrusion activity. One technological countermeasure to exploitative intrusion activity is intrusion reaction capability. But intrusion detection and reaction (IDR) systems in operation today do not provide a number of reaction features that might materially help the Air Force protect its networks and computers. This report develops a profile of such features. It recommends areas where the Air Force can make effective investments in research, development, and investigation of intrusion reaction capabilities that can improve IDR systems.