287 search results - page 3 / 58 » Using Unsupervised Learning for Network Alert Correlation |
ACMSE
2005
ACM
13 years 11 months ago
2005
ACM
Accurate identification of misuse is a key factor in determining appropriate ways to protect systems. Modern intrusion detection systems often use alerts from different sources su...
ESORICS
2004
Springer
13 years 11 months ago
2004
Springer
Abstract. Correlating security alerts and discovering attack strategies are important and challenging tasks for security analysts. Recently, there have been several proposed techni...
LISA
2007
13 years 7 months ago
2007
We present an architecture1 designed for alert verification (i.e., to reduce false positives) in network intrusion-detection systems. Our technique is based on a systematic (and a...
CAI
2005
Springer
13 years 5 months ago
2005
Springer
Current information protection systems only detect and warn against individual intrusion, and are not able to provide a collective and synthesized alert message. In this paper, we ...
LISA
2004
13 years 7 months ago
2004
Originally published at Usenix LISA 2004 conference. November 2004 Atlanta, Georiga, USA. Log analysis is an important way to keep track of computers and networks. The use of auto...