Research on alert correlation method based on alert confidence in multi-IDS environment

To overcome the shortcoming of current alert correlation methods which didn’t consider the confidence of IDS,an alert correlation method based on alerts confidence using the evidence theory was presented.Each alert was regarded as a piece of evidence of a network attack.Then multiple pieces of evide...

Descripción completa

Detalles Bibliográficos

Autores principales:	MEI Hai-bin, GONG Jian
Formato:	Artigo
Lenguaje:	Chinês
Publicado:	Editorial Department of Journal on Communications 2011-01-01
Colección:	Tongxin xuebao
Materias:	network security;intrusion detection system;alert correlation;evidence theory;confidence
Acceso en línea:	http://www.joconline.com.cn/thesisDetails?columnId=74419639&Fpath=home&index=0
Etiquetas:	Agregar Etiqueta Sin Etiquetas, Sea el primero en etiquetar este registro!