An Intrusion Answer Model Compatible with the Alerts IDWG Model

This paper presents a data model designed to format answers in intrusion detection systems. The featured model aims at allowing interoperability between different systems. An architecture proposal for the intrusion detection systems that makes response treatment feasible is also introduced. Both architecture and data model are compatible with interoperability among IDSs related works already carried out by the IDWG group. Also, the development and testing of the proposed model and the architecture components are presented.