Abstract: Alert fusion includes alert normalization, verification, aggregation and correlation. Alert fusion model based on multi-component analysis can implement each aspect of alert fusion. The module is the leading issue of safety management and research of intrusion detection field. Experimental results show that the model is effective and efficient.

Key words: Network security, Security management, Alert fusion, Attack scenario

摘要： 报警融合包括报警的规范、验证、聚合和关联，基于多组件分析的报警融合模型能实现报警融合的各个环节，成为安全管理和入侵检测领域研究的前沿课题。实验结果证明，该模型是可行的、有效的。

关键词: 网络安全, 安全管理, 报警融合, 攻击场景