首页    期刊浏览 2024年12月06日 星期五
登录注册

文章基本信息

  • 标题:Improving the Quality of Alerts with Correlation in Intrusion Detection
  • 作者:Lalla Fatima Salim ; Abdellatif Mezrioui
  • 期刊名称:International Journal of Computer Science and Network Security
  • 印刷版ISSN:1738-7906
  • 出版年度:2007
  • 卷号:7
  • 期号:12
  • 页码:210-215
  • 出版社:International Journal of Computer Science and Network Security
  • 摘要:With the growing deployment of networks and the Internet, the importance of network security has increased. Recently, however, systems that detect intrusions, which are important in security countermeasures, have been unable to provide proper analysis or an effective defense mechanism. Instead, they have overwhelmed human operators with a large volume of intrusion detection alerts. In this paper, we present an alert correlation technique based on causal relationships between alerts. The goal of the proposed technique is not only to group alerts together, but also to represent the correlated alerts in a way that they reflect the corresponding attack scenarios.
  • 关键词:Intrusion alert; alerts correlation; attack scenarios; Network Security
Loading...
联系我们|关于我们|网站声明
国家哲学社会科学文献中心版权所有