Once an incident occurs Recovery and Response is the process by which a system will recover from and respond to that incident.
Documents- Background Paper Presentation - Intrusion Detection Systems: A Survey and Taxonomy
- Research Paper Presentation - An Immunity-Based Technique to Characterize Intrusions in Computer Networks
- Homework
- Intrusion Detection Systems: A Survey and Taxonomy, Stefan Axelson. Chalmers University of Technology, Sweden, 2000.
- Towards a taxonomy of intrusion-detection systems, Debar, Decier and Wespi. Computer Networks, p805-822, 1999.
- An Immunity-Based Technique to Characterize Intrusions in Computer Networks
- Bro Intrusion Detection System
- MIT Lincoln Lab Intrusion Detection Evaluation