- Policy
- Failure to meet obligations in the extranet LAN A, according to
attack schema S1, 10 times from the same source in domain Z should be
reported to administrator
- Formalised as
P1(O+, LAN A, S1, Domain Z, 10, "Report to
administrator")
- Attack Schema
S1(telnet, same, anyone, failure, from
extranet,
frequency
)