Study of Threat Scenario Reconstruction based on Multiple Correlation
Xuejun Yuan, Jing Du, Futong Qin, Yunyan Zhou · Journal of Physics Conference Series · 2017
The emergence of intrusion detection technology has solved many network attack problems, ensuring the safety of computer systems. However, because of the isolated output alarm information, large amount of data, and mixed events, it is difficult for the managers to understand the deep logic relationship between the alarm information, thus they cannot deduce the attacker's true intentions. This paper presents a method of online threat scene reconstruction to handle the alarm information, which reconstructs of the threat scene. For testing, the standard data set is used.