Towards incorporating human intelligence into online security solutions

Saman Zonouz, Robin Berthier, Negin Arhami

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Abstract

The design of automated online security and intrusion tolerance solutions for computer systems and networks is a theoretically achievable objective. However, after two decades of research, this objective has still not yet successfully passed the practicality test to become widely adopted. We believe that the main reason behind this gap lies in the misleading definition of autonomous security that precludes human intervention in trying to achieve unrealistic level of full automation. In this position paper, we discuss a novel research direction to address this challenge through a coherent integration of human intelligence. In particular, we identify the key questions to be answered in order to enable human intelligence to be leveraged in a seamless manner and without requiring explicit heavy human involvements. We illustrate our discussion through the preliminary design of a semi-automated intrusion detection and response system that incorporates reasonable human input to achieve higher levels of intrusion tolerance efficiency.

Original languageEnglish
Title of host publicationProceedings of the International Conference on Dependable Systems and Networks
DOIs
StatePublished - Dec 1 2012
Event2012 IEEE/IFIP 42nd International Conference on Dependable Systems and Networks Workshops, DSN-W 2012 - Boston, MA, United States
Duration: Jun 25 2012Jun 28 2012

Other

Other2012 IEEE/IFIP 42nd International Conference on Dependable Systems and Networks Workshops, DSN-W 2012
CountryUnited States
CityBoston, MA
Period6/25/126/28/12

Fingerprint

Intrusion detection
Computer networks
Computer systems
Automation

Keywords

  • collaborative filtering
  • Online intrusion detection and response
  • system security visualization

ASJC Scopus subject areas

  • Computer Networks and Communications
  • Hardware and Architecture
  • Software

Cite this

Zonouz, S., Berthier, R., & Arhami, N. (2012). Towards incorporating human intelligence into online security solutions. In Proceedings of the International Conference on Dependable Systems and Networks [6264684] https://doi.org/10.1109/DSNW.2012.6264684

Towards incorporating human intelligence into online security solutions. / Zonouz, Saman; Berthier, Robin; Arhami, Negin.

Proceedings of the International Conference on Dependable Systems and Networks. 2012. 6264684.

Research output: Chapter in Book/Report/Conference proceedingConference contribution

Zonouz, S, Berthier, R & Arhami, N 2012, Towards incorporating human intelligence into online security solutions. in Proceedings of the International Conference on Dependable Systems and Networks., 6264684, 2012 IEEE/IFIP 42nd International Conference on Dependable Systems and Networks Workshops, DSN-W 2012, Boston, MA, United States, 6/25/12. https://doi.org/10.1109/DSNW.2012.6264684
Zonouz S, Berthier R, Arhami N. Towards incorporating human intelligence into online security solutions. In Proceedings of the International Conference on Dependable Systems and Networks. 2012. 6264684 https://doi.org/10.1109/DSNW.2012.6264684
Zonouz, Saman ; Berthier, Robin ; Arhami, Negin. / Towards incorporating human intelligence into online security solutions. Proceedings of the International Conference on Dependable Systems and Networks. 2012.
@inproceedings{6f1d06b30ffc479ebdcac41e8dd5591c,
title = "Towards incorporating human intelligence into online security solutions",
abstract = "The design of automated online security and intrusion tolerance solutions for computer systems and networks is a theoretically achievable objective. However, after two decades of research, this objective has still not yet successfully passed the practicality test to become widely adopted. We believe that the main reason behind this gap lies in the misleading definition of autonomous security that precludes human intervention in trying to achieve unrealistic level of full automation. In this position paper, we discuss a novel research direction to address this challenge through a coherent integration of human intelligence. In particular, we identify the key questions to be answered in order to enable human intelligence to be leveraged in a seamless manner and without requiring explicit heavy human involvements. We illustrate our discussion through the preliminary design of a semi-automated intrusion detection and response system that incorporates reasonable human input to achieve higher levels of intrusion tolerance efficiency.",
keywords = "collaborative filtering, Online intrusion detection and response, system security visualization",
author = "Saman Zonouz and Robin Berthier and Negin Arhami",
year = "2012",
month = "12",
day = "1",
doi = "10.1109/DSNW.2012.6264684",
language = "English",
isbn = "9781467322645",
booktitle = "Proceedings of the International Conference on Dependable Systems and Networks",

}

TY - GEN

T1 - Towards incorporating human intelligence into online security solutions

AU - Zonouz, Saman

AU - Berthier, Robin

AU - Arhami, Negin

PY - 2012/12/1

Y1 - 2012/12/1

N2 - The design of automated online security and intrusion tolerance solutions for computer systems and networks is a theoretically achievable objective. However, after two decades of research, this objective has still not yet successfully passed the practicality test to become widely adopted. We believe that the main reason behind this gap lies in the misleading definition of autonomous security that precludes human intervention in trying to achieve unrealistic level of full automation. In this position paper, we discuss a novel research direction to address this challenge through a coherent integration of human intelligence. In particular, we identify the key questions to be answered in order to enable human intelligence to be leveraged in a seamless manner and without requiring explicit heavy human involvements. We illustrate our discussion through the preliminary design of a semi-automated intrusion detection and response system that incorporates reasonable human input to achieve higher levels of intrusion tolerance efficiency.

AB - The design of automated online security and intrusion tolerance solutions for computer systems and networks is a theoretically achievable objective. However, after two decades of research, this objective has still not yet successfully passed the practicality test to become widely adopted. We believe that the main reason behind this gap lies in the misleading definition of autonomous security that precludes human intervention in trying to achieve unrealistic level of full automation. In this position paper, we discuss a novel research direction to address this challenge through a coherent integration of human intelligence. In particular, we identify the key questions to be answered in order to enable human intelligence to be leveraged in a seamless manner and without requiring explicit heavy human involvements. We illustrate our discussion through the preliminary design of a semi-automated intrusion detection and response system that incorporates reasonable human input to achieve higher levels of intrusion tolerance efficiency.

KW - collaborative filtering

KW - Online intrusion detection and response

KW - system security visualization

UR - http://www.scopus.com/inward/record.url?scp=84880903925&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=84880903925&partnerID=8YFLogxK

U2 - 10.1109/DSNW.2012.6264684

DO - 10.1109/DSNW.2012.6264684

M3 - Conference contribution

SN - 9781467322645

BT - Proceedings of the International Conference on Dependable Systems and Networks

ER -