CLASSIFYING SECURITY ALERTS FROM MULTIPLE SENSORS BASED ON HYBRID APPROACH
Maheyzah Md Siraj, Mohd Aizaini Maarof, Siti Zaiton Mohd Hashim · 2012
Protecting and assuring confidential information on the internet is a crucial need. Many organizations have installed multiple security sensors for complete monitoring and detection (for example the deployment of network-based Intrusion Detection Systems (NIDSs) in a distributed network). In effect, an enormous number of alerts are generated in a different kind of formats. This overburden the Security Analyst (SA) to conduct manual alert correlation (AC) since it would be tedious, labour intensive and worst, error prone.