Alert Fusion Based on Multi-component Analysis
LV Luo-wen · Jisuanji gongcheng · 2006
Alert fusion includes alert normalization,verification,aggregation and correlation.Alert fusion model based on multi-component analysis can implement each aspect of alert fusion.The module is the leading issue of safety management and research of intrusion detection field.Experimental results show that the model is effective and efficient.