Sliding Window Based Security Event Correlation
HU Jia-fu, Yong-liang Dong · 2007
This paper proposed a sliding window based correlation model which could conveniently and efficiently correlate events between different security systems. This model works in a best-effort way to find all relationship between events and enhance event's reliability in the time window. When the correlation is ending, the original event is either eliminated from event sequence or gotten an increased reliability.