Using fuzzy clustering to reconstruct alert correlation graph of intrusion detection

Causal correlation method was one of the most representative methods for instruction detection alert correla-tion. In some conditions, the correlation graph would be split because of loss of causal information. In order to solve the problem, an algorithm was proposed to reconstruct attack scenario u...

Cijeli opis

Bibliografski detalji

Glavni autori:	MA Lin-ru1, YANG Lin2, WANG Jian-xin2, TANG Xin2
Format:	Artigo
Jezik:	Chinês
Izdano:	Editorial Department of Journal on Communications 2006-01-01
Serija:	Tongxin xuebao
Teme:	alert correlation;attack scenario reconstruction;fuzzy clustering;similarity membership function
Online pristup:	http://www.joconline.com.cn/thesisDetails?columnId=74662209&Fpath=home&index=0
Oznake:	Dodaj oznaku Bez oznaka, Budi prvi tko označuje ovaj zapis!