Using fuzzy clustering to reconstruct alert correlation graph of intrusion detection

Causal correlation method was one of the most representative methods for instruction detection alert correla-tion. In some conditions, the correlation graph would be split because of loss of causal information. In order to solve the problem, an algorithm was proposed to reconstruct attack scenario u...

Celý popis

Podrobná bibliografie

Hlavní autoři:	MA Lin-ru1, YANG Lin2, WANG Jian-xin2, TANG Xin2
Médium:	Artigo
Jazyk:	Chinês
Vydáno:	Editorial Department of Journal on Communications 2006-01-01
Edice:	Tongxin xuebao
Témata:	alert correlation;attack scenario reconstruction;fuzzy clustering;similarity membership function
On-line přístup:	http://www.joconline.com.cn/thesisDetails?columnId=74662209&Fpath=home&index=0
Tagy:	Přidat tag Žádné tagy, Buďte první, kdo vytvoří štítek k tomuto záznamu!