{'fraction_non_alphanumeric': 0.027488151658767772, 'fraction_numerical': 0.0, 'mean_word_length': 5.518518518518518, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
SRAM: A State-Aware Risk Assessment Model for Intrusion Response

Recent advances in Intrusion Risk Assessment (IRA) have brought promising solutions to enhance Intrusion Response Systems (IRS). However, current researches lack reasonable solutions to exploit system state information. Without the system state, the IRA results may suffer from the high false rate of Intrusion Detection Systems (IDS). To address this limitation, we propose a novel State-Aware Risk Assessment Model (SRAM) by taking both the outputs of IDS and system state information into account. Specific evaluation factors are formulated for different attack types to improve the pertinence of evaluation. To better meet the needs of Quality of Service (QoS), expected weights on Confidentiality, Integrity and Availability (CIA) are considered based on different response intensions. D-S evidence theory is introduced in fusing the evaluation factors to provide an objective assessment. Experimental results show our approach can increase the credibility of IRA results effectively.