A Step Towards an Autonomous Tuning Engine Design for Self-Protection and Self-Configuration

Abstract

The efficiency of any system is related to the quality of its configuration and tuning. Especially in security appliances, there exists strong relativity in performance efficiency and quality of tuning and configuration. This paper presents an approach to design a tuning engine that will dynamically configure the security devices according to the rules defined by policy makers and network administrators. The tuning engine will dynamically configure the devices to act efficiently for specific threats. It will filter the irrelevant daily alerts from different security devices. The scope of response of a security system is selected by finding out the probability of occurrence of a specific threat and the severity of that threat. Thus the tuning engine dynamically configures the response of security system according to the policies defined for different types of threat. This is an attempt to design a tuning engine which has influences from general policies, administrator settings and information during its operations. The mechanism of introducing the influence of information and policies for tuning and configuration of security devices will efficiently decrease the false alarm rates in any security system.