An Intrusion-Event-Based Detection Analysis Technology
Zhenquan Zhuang · Computer Engineering and Science · 2005
In this paper, we present a detection technology based on intrusion events in order to overcome the shortcomings of high false alert rate, serious redundant alerts and poor expression about the intrusion activities in today's intrusion detection systems. We describe the design ideas about the important methods used in this technology such as multi-sensor data fusion, raw alert distinguishment based on fuzzy rules and so on in detail. Experimental results show that compared with the existing intrusion detection systems, this technology can reduce the system test cost greatly.