Research of Persistent Correlation Algorithm Based on Layer Correlation Rule
Qian Wei · China Information Security · 2007
The correlation speed of Correlation Engine based on the Security Operation Center (SOC) determines the real time of Correlation Engine, and objectively settles the capability of SOC dealing with the security threats. In order to improve correlation's speed, this paper puts forward a solution to the correlation speed depending on the main points of correlation rules' organization and persistent correlation algorithm's design and realization.