Application and Implementation of Causal Alert Correlation Method in Intrusion Detection System
Qin Zheng · 2008
Against a company intrusion detection system products superintendent high rate of false will cause alert correlation method into the original system,the alert correlation information is analyzed. Using 2000 DARPA intrusion detection scenario-specific datasets LLDOS1.0 for experimental verification of the new system,the results show that the new system can effectively reduce false alert rate and can be used to graphically display alert information in the form of a causal relationship,the image reveals an attacker to attack the course and attack strategy.