Attacks prevention model using semantic correlation and multiagent systems
Gustavo Adolfo Isaza, Néstor Duque, Luis Castillo, Marcelo López · 2011
The attacks detection and prevention problem could be improved using new intelligent techniques. This paper aims to define an ontology model for intrusion correlation over intelligent multiagent system. The semantic model describes attacks signatures, reaction rules, axioms with alerts communication and correlation. The proposed model optimizes the alerts correlation process providing the inference and reasoning to the ontology model.