Network security event's macro alert and response analysis technology based on network topology
Fang Binxing · Ha'erbin gongye daxue xuebao · 2005
Network security events such as worms can greatly compromise the Internet.To date,how to quickly detect and effectively control the emergence and development of such events has become one of the focuses of research among network security experts at home and abroad.The research includes combining active measures with anomaly detection,implementing a large-scale network security event cooperative alert system,focusing on macro alert analysis,choosing a control point,creating control suggestions,etc.After the process of visualization,it exhibits preferable application effects.