Security Event Management System in the achievement Correlation analysis engine
Xuedong He · Computers & Security · 2008
With the development of the information technology,the network attack is rampant day by day.To safeguard the normal work of the enterprise network,the major industry has deployed numbers of security equipment on the network.When attacks occur,the security equipment will have the massive safe warning event in a short time,the manager is very difficult to obtain the valuable information from the warning event in limited time.The Security Event Management System collects and manages these security events and analyzes the related information between the safety emergency event,the network equipment and the host log as well as the system vulnerability information obtained by scanning the crack.So the system can quickly discover the potential threats caused by the network attack behavior and finally enhance the security and the reliability in the whole network.