Approaches for Collaborative Security Defences in Multi Network Environments

Resolving distributed attacks benefits from collaboration between networks. We present three approaches for the same multi-domain defensive action that can be applied in such an alliance: 1) Counteract Everywhere, 2) Minimize Countermeasures, and 3) Minimize Propagation. First, we provide a formula to compute efficiency of a defense; then we use this formula to compute the efficiency of the approaches under various circumstances. Finally, we discuss how task execution order and timing influence defense efficiency. Our results show that the Minimize Propagation approach is the most efficient method when defending against the chosen attack.

I. Introduction

Attacks on computer infrastructures remain a persistent problem on the internet. Resolving these attacks often benefit from the support and actions of parties other than the victim. Still, most organisations connected to the internet operate their network domain autonomously using their own policies, therefore they share little information with others, which also applies to the subject of security.