Survey of alerts correlation and testing dataset of intrusion detection system
Dongmei Yu · Jisuanji yingyong yanjiu · 2008
At first,this paper studied technology and method of alert correlation for analyzing their advantages and disadvantages.Then,presented alert correlation model based on multi-sources data fusion.After that,discussed evaluation dataset for analyzing their used scope and existent problems.At last,described future research and development.