Design and Implementation of Intrusion Detection Alert Fusion System
Min Sun · Computer Technology and Development · 2007
Aiming at some problems in current IDS,such as false positive,false negative,analyzes the reason of false positive.An IDS alerts information fusion model is presented,and similarity subordination functions are presented for correlation of alert event.Experiments show that the IDS alerts information fusion system is effective in reducing the number of alerts,false positive,false negative better and it can warn according to attack intention identified.