ORCEF: Online response cost evaluation framework for intrusion response system

In this paper, we present a practical framework with relevant factors for response cost evaluation. The proposed framework is a platform that leads us to account for the user׳s needs in terms of quality of services (QoS) and the dependencies of critical processes. Compared with other response evaluation models, the proposed framework consists of not only a novel online mechanism for response cost evaluation in complex network topologies, but also more detailed factors to evaluate responses positive effect and negative impact. In addition, we discuss the main challenges to evaluate response cost with respect to the attack type.