This blog was originally started to better help me understand the technologies in the CCIE R&S blueprint; after completing the R&S track I have decided to transition the blog into a technology blog.

CCIE #29033

This blog will continue to include questions, troubleshooting scenarios, and references to existing and new technologies but will grow to include a variety of different platforms and technologies. Currently I have created over 185 questions/answers in regards to the CCIE R&S track!! Note: answers are in the comment field or within "Read More" section.

You can also follow me on twitter @FE80CC1E


Thursday, May 20, 2010

Question 121

What is "SFR", "ASR" and TVR?
Posted by Packets Analyzed at 6:18 AM
Labels: ,

1 comments:

Packets Analyzed said...

These 3 and 1 component are used in Cisco IPS rating system. The higher the number the greater the risk.

SFR - Signature Fidelity Rating
ASR - Alert Severity Rating
TVR - Target Value Rating

and

ARR - Attack Relevancy Rating

The risk rating formula

RR = Fidelity * Severity * Target Value Rating
______________________________________________
                      100 * 100 * 100

Signature Fidelity Rating (SFR) = Relative measure of the accuracy of the signature (predefined); 0–100 Set by Cisco Systems, Inc.
Alert Severity Rating (ASR) = Relative result or damage if the attack succeeds (predefined); 25—Information, 50—Low, 75—Medium, 100—
High
Target Value Rating (TVR) = Value used to change the risk rating higher or lower based on the target of the attack (user defined);
75—Low Asset Value , 100—Medium Asset value , 150—High Asset Value, 200—Mission Critical Asset Value

October 15, 2010 at 7:03 PM

Post a Comment

Subscribe to: Post Comments (Atom)