Research for Network Security and Reliability and Performance Assess
Yang Yu-xing · 2013
With the wildly use of heterogeneous security devices like firewalls and intrusion detection systems generates huge amounts of unreliable security events, which are difficult to manage, united platform of network security management is proposed. Using risk assessment and alerts correlation, the platform can analyze the risk of network in real-time, and reduce false positive ratio and false negative ratio effectively. First introduce the framework of the platform and functions of each module, then the implementation of event pre-treatment, real-time risk assessment and alert correlation are discussed in detail.