Intrusion Detection Alert Correlation Based on Choquet Fuzzy Integral
Liang Qing Hu · Dianzi xuebao · 2011
The alert correlation,choquet fuzzy integral and fuzzy cognitive maps was analyzed,the correlation of IDS alerts based choquet fuzzy integral was proposed and the correlation engine of intrusion detection system was designed.Though experiences of the DRDOS attack and LLDOS attack,it is proved that the alert correlation in the paper could correlate the alerts with high feasibility.