Study of alert correlation analysis technique based on anonymization
Yi-Feng LIAN · Computer Engineering and Applications Journal · 2009
Data generated by security systems may include sensitive information that data owners do not want to disclose or share with others.Therefore,efficient anonymization of the alert data containing privacy is necessary before they are shared and made correlation analysis.Anonymization of the original alerts containing privacy is dealt with by using concept hierarchy in this paper,on the basis of which the correlation analysis of anonymized alerts is carried out with altered probabilistic similarity based approaches.The result of experiments proves effective correlation approaches fit with anonymized alerts.