Research on Intrusion Precursor Based on Causal Correlation of MIB
Luo Jun-li · Computer Knowledge and Technology · 2013
In the paper we proposes an approach of extracting intrusion precursor rules which is based on temporal-causal corre lation.The approach is rooted in time series data obtained from MIB variable in network management system and in the applica tion of the causality test for selecting variables that are likely contain the precursors of attack.The intrusion precursor rules can be used to trigger alarms that an attack is imminent.The experiment proved the validity of the method.