Stateful Security Alert Correlation by Dynamic Bayesian Plan Graph
Zhiyuan Ye · Beijing Daxue Xuebao. Zirankexueban · 2006
The concept of stateful alert correlation and a correlation algorithm based on dynamic Bayesian planning graph are proposed. Dynamic Bayesian planning graph adds dynamic Bayesian inference to based planning graph. It represents system security states explicitly and the relation between states and actions. The algorithm handles uncertain information with Bayesian inference, giving a quantitative evaluation of the security state of a system and eliminating false alarms effectively.