A NEW MODEL TO MANAGE IDS ALERTS
Marco Aurélio Bonato, Walter Godoy · 2004
The goal of this paper is to present a new model to reduce the alerts generated by an IDS (Bace, 2000) analyzer. This model allows the administrator to analyze only the messages that really generate risks for an environment or machine. This is very important when you have a complex environment with a lot of machines with many services in them.