A Retroactive-Burst Framework for Automated Intrusion Response System

Table 1

Relationship between Responses and RC.

Response; name	RC					Hosts
	Application	Kernel	Local Services	Network Services	Physical	H1	H2	H3	H4	…	H𝑛
	𝑤𝐴	𝑤𝐾	𝑤𝐿𝑆	𝑤𝑁𝑆	𝑤𝑃	VH1	VH2	VH3	VH4	…	VH𝑛
𝑅1	Linked		Linked	Linked				Applied
𝑅2	Activated	Activated		Linked		Applied	Applied	Applied
𝑅3	Activated	Activated		Activated	Activated	Applied		Applied			Applied
𝑅4	Linked		Linked	Linked	Linked		Applied		Applied
⋮
Status	Medium	High	Zero	Low	Medium
Index			Low