Analyzing intensive intrusion alerts via correlation

DOI10.1007/3-540-36084-0_5MaRDI QIDQ4425832zbMATH OpenFDO

Authors Peng Ning, Yun Cui, Douglas S. Reeves

Publication date 14 September 2003

Published in Lecture Notes in Computer Science (Search for Journal in Brave)

Full work available at URL http://link.springer.de/link/service/series/0558/bibs/2516/25160074.htm, http://www.lib.ncsu.edu/resolver/1840.4/783

zbMATH Keywords

Alert CorrelationAttack Scenario AnalysisIntrusion Detection

Mathematics Subject Classification ID

Data encryption (aspects in computer science) (68P25)

Recommendations

• Correlating Alerts into Compressed Graphs Using an Attribute-Based Method and Time Windows
• Probabilistic alert correlation
• Aggregation and correlation of intrusion-detection alerts
• A mission-impact-based approach to INFOSEC alarm correlation
• Intrusion detection and correlation. Challenges and solutions

Cited in

(16)

• A review of attack graph and attack tree visual syntax in cyber security
• Hidden semi-Markov model for anomaly detection
• An alert correlation approach based on security operator's knowledge and preferences
• Correlating Alerts into Compressed Graphs Using an Attribute-Based Method and Time Windows
• IDS False Alarm Reduction Using Continuous and Discontinuous Patterns
• Estimating the number of hosts corresponding to an intrusion alert while preserving privacy
• A mission-impact-based approach to INFOSEC alarm correlation
• M2D2: A formal data model for IDS alert correlation
• Evaluation of the diagnostic capabilities of commercial intrusion detection systems
• IDS interoperability and correlation using IDMEF and commodity systems
• Measuring false-positive by automated real-time correlated hacking behavior analysis
• Probabilistic alert correlation
• Aggregation and correlation of intrusion-detection alerts
• Applied Cryptography and Network Security
• Two alternatives for handling preferences in qualitative choice logic
• Improving the quality of alerts and predicting intruder's next goal with Hidden Colored Petri-Net

This page was built for publication: Analyzing intensive intrusion alerts via correlation

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q4425832)