IDEAS home Printed from https://ideas.repec.org/a/spr/infotm/v22y2021i4d10.1007_s10799-020-00319-z.html
   My bibliography  Save this article

Optimal configuration of intrusion detection systems

Author

Listed:
  • Birendra Mishra

    (University of California at Riverside)

  • Inna Smirnova

    (University of Vienna)

Abstract

An important requirement of an intrusion detection system (IDS) is that it be effective and efficient; that is, it should detect a large percentage of intrusions, while still keeping the false alarm rate at an acceptable level. In order to meet this requirement, the model and algorithm used by the IDS need to be calibrated or configured. The optimal configuration depends on several factors. The first factor is the quality profile of the IDS as indicated by its ROC (receiver operating characteristics), curve that relates the detection accuracy and the false alarm rate. The shape of the ROC curve depends on the detection technology used by the IDS. The second factor is the cost structure of the firm using the IDS. The third factor is the strategic behavior of hackers. A hacker’s behavior is influenced by the likelihood that (s)he will be caught, which, in turn, is dependent on the configuration of the IDS. In this article, we present an economic optimization model based on game theory that provides insights into optimal configuration of IDS. We present analytical as well as computational results. Our work extends the growing literature on the economics of information security. The main innovation of our approach is the inclusion of strategic interactions between IDS, firm, and hackers in the determination of optimal configuration and algorithm to do so.

Suggested Citation

  • Birendra Mishra & Inna Smirnova, 2021. "Optimal configuration of intrusion detection systems," Information Technology and Management, Springer, vol. 22(4), pages 231-244, December.
  • Handle: RePEc:spr:infotm:v:22:y:2021:i:4:d:10.1007_s10799-020-00319-z
    DOI: 10.1007/s10799-020-00319-z
    as

    Download full text from publisher

    File URL: http://link.springer.com/10.1007/s10799-020-00319-z
    File Function: Abstract
    Download Restriction: Access to the full text of the articles in this series is restricted.

    File URL: https://libkey.io/10.1007/s10799-020-00319-z?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    As the access to this document is restricted, you may want to search for a different version of it.

    References listed on IDEAS

    as
    1. Sumit Sarkar & Ram S. Sriram, 2001. "Bayesian Models for Early Warning of Bank Failures," Management Science, INFORMS, vol. 47(11), pages 1457-1475, November.
    Full references (including those not matched with items on IDEAS)

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Kunpeng Zhang & Wendy Moe, 2021. "Measuring Brand Favorability Using Large-Scale Social Media Data," Information Systems Research, INFORMS, vol. 32(4), pages 1128-1139, December.
    2. Huseyin Cavusoglu & Srinivasan Raghunathan, 2004. "Configuration of Detection Software: A Comparison of Decision and Game Theory Approaches," Decision Analysis, INFORMS, vol. 1(3), pages 131-148, September.
    3. Polyzos, Stathis & Samitas, Aristeidis & Katsaiti, Marina-Selini, 2020. "Who is unhappy for Brexit? A machine-learning, agent-based study on financial instability," International Review of Financial Analysis, Elsevier, vol. 72(C).
    4. Casado Yusta, Silvia & Nœ–ez Letamendía, Laura & Pacheco Bonrostro, Joaqu’n Antonio, 2018. "Predicting Corporate Failure: The GRASP-LOGIT Model || Predicci—n de la quiebra empresarial: el modelo GRASP-LOGIT," Revista de Métodos Cuantitativos para la Economía y la Empresa = Journal of Quantitative Methods for Economics and Business Administration, Universidad Pablo de Olavide, Department of Quantitative Methods for Economics and Business Administration, vol. 26(1), pages 294-314, Diciembre.
    5. Xiao Fang & Olivia R. Liu Sheng & Paulo Goes, 2013. "When Is the Right Time to Refresh Knowledge Discovered from Data?," Operations Research, INFORMS, vol. 61(1), pages 32-44, February.
    6. Chiuling Lu & Ann Yang & Jui-Feng Huang, 2015. "Bankruptcy predictions for U.S. air carrier operations: a study of financial data," Journal of Economics and Finance, Springer;Academy of Economics and Finance, vol. 39(3), pages 574-589, July.
    7. Jason R. W. Merrick & Claire A. Dorsey & Bo Wang & Martha Grabowski & John R. Harrald, 2022. "Measuring Prediction Accuracy in a Maritime Accident Warning System," Production and Operations Management, Production and Operations Management Society, vol. 31(2), pages 819-827, February.
    8. Dong Zhao & Chunyu Huang & Yan Wei & Fanhua Yu & Mingjing Wang & Huiling Chen, 2017. "An Effective Computational Model for Bankruptcy Prediction Using Kernel Extreme Learning Machine Approach," Computational Economics, Springer;Society for Computational Economics, vol. 49(2), pages 325-341, February.
    9. Christof Naumzik & Stefan Feuerriegel & Markus Weinmann, 2022. "I Will Survive: Predicting Business Failures from Customer Ratings," Marketing Science, INFORMS, vol. 41(1), pages 188-207, January.
    10. Yucel, Eray, 2011. "A Review and Bibliography of Early Warning Models," MPRA Paper 32893, University Library of Munich, Germany.
    11. Sree Rama Murthy Y, 2013. "Logit Regression Approach to Rating Banks Using Financial Ratios: A Study of Gulf Cooperation Council Banks," International Journal of Financial Research, International Journal of Financial Research, Sciedu Press, vol. 4(4), pages 107-117, October.
    12. Kathleen Weiss Hanley & Gerard Hoberg, 2019. "Dynamic Interpretation of Emerging Risks in the Financial Sector," The Review of Financial Studies, Society for Financial Studies, vol. 32(12), pages 4543-4603.
    13. Manthoulis, Georgios & Doumpos, Michalis & Zopounidis, Constantin & Galariotis, Emilios, 2020. "An ordinal classification framework for bank failure prediction: Methodology and empirical evidence for US banks," European Journal of Operational Research, Elsevier, vol. 282(2), pages 786-801.
    14. J. Uthayakumar & Noura Metawa & K. Shankar & S. K. Lakshmanaprabu, 2020. "RETRACTED ARTICLE: Intelligent hybrid model for financial crisis prediction using machine learning techniques," Information Systems and e-Business Management, Springer, vol. 18(4), pages 617-645, December.
    15. Lili Sun, 2007. "A re-evaluation of auditors’ opinions versus statistical models in bankruptcy prediction," Review of Quantitative Finance and Accounting, Springer, vol. 28(1), pages 55-78, January.
    16. Li, Hui & Sun, Jie, 2012. "Forecasting business failure: The use of nearest-neighbour support vectors and correcting imbalanced samples – Evidence from the Chinese hotel industry," Tourism Management, Elsevier, vol. 33(3), pages 622-634.
    17. Sajad Abdipour & Ahmad Nasseri & Mojtaba Akbarpour & Hossein Parsian & Shahrzad Zamani, 2013. "Integrating Neural Network and Colonial Competitive Algorithm: A New Approach for Predicting Bankruptcy in Tehran Security Exchange," Asian Economic and Financial Review, Asian Economic and Social Society, vol. 3(11), pages 1528-1539, November.
    18. Zhiqiang (Eric) Zheng & Paul A. Pavlou, 2010. "Research Note ---Toward a Causal Interpretation from Observational Data: A New Bayesian Networks Method for Structural Models with Latent Variables," Information Systems Research, INFORMS, vol. 21(2), pages 365-391, June.
    19. Florian Diekert & Daniel Heyen & Frikk Nesje & Soheil Shayegh, 2024. "Balancing the Risk of Tipping: Early Warning Systems from Detection to Management," CESifo Working Paper Series 10892, CESifo.
    20. Samir Trabelsi & Roc He & Lawrence He & Martin Kusy, 2015. "A comparison of Bayesian, Hazard, and Mixed Logit model of bankruptcy prediction," Computational Management Science, Springer, vol. 12(1), pages 81-97, January.

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:spr:infotm:v:22:y:2021:i:4:d:10.1007_s10799-020-00319-z. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Sonal Shukla or Springer Nature Abstracting and Indexing (email available below). General contact details of provider: http://www.springer.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.