Research and Design of Security Event Correlation System
Qing Wu · Journal of Military Communications Technology · 2007
It's difficult for the network manager to pick up wanted information from a huge number of alerts that come from various security devices distributed in the network.In this paper,a kind of architecture of security event correlation system was presented,and the process of security event correlation was also described in detail.