- 期刊
A Rule-Based Temporal Alert Correlation System
並列摘要
This paper reports a research work to address the problem of the large number of alerts generated by the detectors in an intrusion detection system. Some of these alerts are redundant and have to be aggregated; others may follow a certain attack pattern that should be correlated. Generally, this operation is referred to as alert correlation. A more detailed explanation of the alert correlation is presented in the paper. Paper proposes a rule-based approach to solve this problem. In the reported work, an inference engine is implemented to derive the correlation between the alerts using a scenario-based knowledge base and to aggregate redundant alerts. Experimental results based on sample alerts and scenarios are reported in this paper.
延伸閱讀
- 黃啟宗（2006）。Implementation of State-Space Method and VaR Applied to Risk Alert Model〔碩士論文，元智大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0009-2407200601010900
- Fan, Y. (2014). Suboptimal Event-Triggered Consensus of Multiagent Systems. Abstract and Applied Analysis, 2014(), 325-332-438. https://doi.org/10.1155/2014/325751
- 吳亭霓（2022）。A Temporal Analysis of COVID-19 News〔碩士論文，國立臺灣大學〕。華藝線上圖書館。https://doi.org/10.6342/NTU202204108
- Xie, X., Xu, H. L., & Zhang, R. (2014). Exponential Stabilization of Impulsive Switched Systems with Time Delays Using Guaranteed Cost Control. Abstract and Applied Analysis, 2014(), 315-322. https://doi.org/10.1155/2014/126836
- Seierstad, A. (2012). Optimal Control of Diffusions with Hard Terminal State Restrictions. ISRN Applied Mathematics, (), 185-222. https://doi.org/10.5402/2012/729490