34 search results - page 2 / 7 » Aggregation and Correlation of Intrusion-Detection Alerts |
ACNS
2004
Springer
13 years 10 months ago
2004
Springer
Abstract. We propose a novel framework named Hidden Colored PetriNet for Alert Correlation and Understanding (HCPN-ACU) in intrusion detection system. This model is based upon the ...
ACMSE
2005
ACM
13 years 10 months ago
2005
ACM
Accurate identification of misuse is a key factor in determining appropriate ways to protect systems. Modern intrusion detection systems often use alerts from different sources su...
CORR
2008
Springer
13 years 4 months ago
2008
Springer
: Network intrusion detection sensors are usually built around low level models of network traffic. This means that their output is of a similarly low level and as a consequence, ...
LISA
2007
13 years 7 months ago
2007
We present an architecture1 designed for alert verification (i.e., to reduce false positives) in network intrusion-detection systems. Our technique is based on a systematic (and a...
IJNSEC
2006
13 years 4 months ago
2006
Alert correlation is an important technique for managing large the volume of intrusion alerts that are raised by heterogenous Intrusion Detection Systems (IDSs). The recent trend ...