Sciweavers

Free Online Productivity Tools i2Speak i2Symbol i2OCR iTex2Img iWeb2Print iWeb2Shot i2Type iPdf2Split iPdf2Merge i2Bopomofo i2Arabic i2Style i2Image i2PDF iLatex2Rtf Sci2ools

13

CNSR
2008
IEEE

favoriteEmaildiscussreport

169views Communications» more CNSR 2008»

Critical Episode Mining in Intrusion Detection Alerts

13 years 10 months ago

Critical Episode Mining in Intrusion Detection Alerts

Download nsl.cs.unb.ca

One of the most important steps in attack detection using Intrusion Detection Systems (IDSs) is dealing with huge number of alerts that can be either critical single alerts and multi-step attack scenarios or false alerts and non-critical ones. In this paper we try to address the problem of managing alerts via a multi-layer alert correlation and ltering that can identify critical alerts after each step of correlation and ltering. After applying

Mahboobeh Soleimani, Ali A. Ghorbani

Real-time Traffic

Alerts | CNSR 2008 | Communications | Critical Single Alerts | False Alerts |

claim paper

Related Content

» Alert Fusion for a Computer Host Based Intrusion Detection System

» Selective and Early Threat Detection in Large Networked Systems

» Mining fuzzy association rules and fuzzy frequency episodes for intrusion detection

» Mining intrusion detection alarms for actionable knowledge

» Exploiting Frequent Episodes in Weighted Suffix Tree to Improve Intrusion Detection System

» Combining Knowledge Discovery and Knowledge Engineering to Build IDSs

» A Data Mining Framework for Building Intrusion Detection Models

» Typed Linear Chain Conditional Random Fields and Their Application to Intrusion Detection

» Mining Audit Data to Build Intrusion Detection Models

Post Info
More Details (n/a)

Added	29 May 2010
Updated	29 May 2010
Type	Conference
Year	2008
Where	CNSR
Authors	Mahboobeh Soleimani, Ali A. Ghorbani

Comments (0)