Alert Verification Based on Active D-S Theory Classifier
Hong Zhao · Jisuanji gongcheng · 2009
In order to simplify the excessive alerts of IDS,so as to reduce the number of false positives,an alert verification scheme based on active D-S theory classifier is presented in this paper.This scheme adequately reflects the probabilistic relationships of the factors which influence the verification results,and effectively resolves the problem in the traditional methods that the verification method is too strict.Additionally,the scheme has the ability to study the behavior of the attacks to enhance the veracity of the verification.DARPA 2000 LLDOS1.0 from MIT Lincoln Lab is used to evaluate the verification scheme,and the experimental results show the efficiency of the scheme.