Research on Intrusion Event Sequence Correlation Method for Privacy Protection
Duan Xueying · International Journal of Security and Its Applications · 2014
For the shortcomings of traditional network security alarm correlation method, combined with the original alarm information privacy protection needs.On the basis of analyzing the characteristics of multi-step attack, proposed the use of sequential pattern mining techniques associated with rapid multi-step attack methods QSPM.And on this basis, proposed privacy protection security alarm multistep attack sequence pattern mining method PPSPM, Achieve the associated sequence of events following the invasion premise security.Experiments show that the algorithm makes quantitative analysis.And compared with typical sequential pattern mining algorithm.Results show the new methods have a positive accuracy and efficiency.