Design and Implementation of a Security Event Correlation Model in Certificate Authentication
Jicheng Zhou · Journal of Information Engineering University · 2009
How to effectively find out valuable abnormal behaviors from the numerous alarms and logs produced by all kinds of service systems and security products everyday,all of them must be analyzed and the true and non-redundant information should be extracted,which is helpful to find the real problem and availably protect the safety of system.This is one of the biggest challenges which security management is facing in certificate authentication.In this paper we propose a CA security event correlation model,then discuss the filter and aggregation method based on the model.Finally,we apply our model and methods on a security event correlation system.The test results show that the correlation of security event based on our model is more efficient.