A DAG-free Method to Event Correlation for Revealing Abnormal Connections of Cloud Instances
Xiaojian Li, Hangping Hu, Yiyi Jiang, Zhen Zhang, Haopeng Yang, Liqin Liu · Journal of Physics Conference Series · 2022
Abstract We proposes an event correlation method with rule evaluation(ECRE) to reveal abnormal connections from cloud Instances. We combine some characteristics of status-pair to categorize all abnormal status-connections as far as possible. Our method can classify abnormal connections of instances but doesn’t require the DAG of tasks. Those labels that unmatched the supervision rules are removed to remain more and better samples for training. The results that our method achieved show high accuracy, and a significant correlation between the accuracy and the usage count of supervision-rules.