Improved aggregation algorithm for intrusion-detection alerts
Jianhua Liu · Computer Engineering and Applications Journal · 2010
Considering the drawbacks existed in the algorithms based on attribute differences to aggregate intrusion detection alert,an improved algorithm is proposed.The proposed algorithm has the advantages of simplicity and intuition.Experiment results on the DARPA2000 IDS test dataset indicate that the algorithm is efficient.