A framework for network-wide semantic event correlation
Robert T. Hall, Joshua Taylor · Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE · 2013
An increasing need for situational awareness within network-deployed Systems Under Test has increased desire for frameworks that facilitate system-wide data correlation and analysis. Massive event streams are generated from heterogeneous sensors which require tedious manual analysis. We present a framework for sensor data integration and event correlation based on Linked Data principles, Semantic Web reasoning technology, complex event processing, and blackboard architectures. Sensor data are encoded as RDF models, then processed by complex event processing agents (which incorporate domain specific reasoners, as well as general purpose Semantic Web reasoning techniques). Agents can publish inferences on shared blackboards and generate new semantic events that are fed back into the system. We present AIS, Inc.’s Cyber Battlefield Training and Effectiveness Environment to demonstrate use of the framework.