Intrusion Detection Alert Correlation Techniques

doi:10.3969/j.issn.1000-3428.2007.17.059

Computer Engineering ›› 2007, Vol. 33 ›› Issue (17): 173-175. doi: 10.3969/j.issn.1000-3428.2007.17.059

• Security Technology • Previous Articles Next Articles

Intrusion Detection Alert Correlation Techniques

JIANG Zhao-yuan, ZHAO Jun

(Inst. of Comp. Sci. & Tech., Chongqing Univ. of Posts and Telecom., Chongqing 400065)

Received:1900-01-01 Revised:1900-01-01 Online:2007-09-05 Published:2007-09-05

入侵检测报警关联技术

姜兆元，赵　军

(重庆邮电大学计算机科学与技术研究所，重庆 400065)

Abstract

Abstract: Many intrusion detection technologies are complementary to each other. The alert correlation technology analyzes alerts generated from different security products, so that false alerts are greatly reduced, real attacks are more easily discerned, accordingly, the work load on system administrators is largely released. Herein, basic models and technologies of alert correlation are discussed. Important correlation algorithms are analyzed; and development tendencies of alert correlation technologies are also predicted.

Key words: intrusion detection, alert correlation, network security

摘要： 报警关联技术分析不同安全产品产生的报警，从中识别出真正有意义的攻击警报，并减少大量的误报警，降低安全管理员的工作量。该文介绍了报警关联的基本模型和主要技术，分析了主要的关联方法，探讨了报警关联技术的发展方向。这些讨论对应用或发展报警关联技术都有参考价值。

关键词: 入侵检测, 报警关联, 网络安全

CLC Number:

TP309

JIANG Zhao-yuan; ZHAO Jun. Intrusion Detection Alert Correlation Techniques[J]. Computer Engineering, 2007, 33(17): 173-175.

姜兆元;赵　军. 入侵检测报警关联技术[J]. 计算机工程, 2007, 33(17): 173-175.

/ / Recommend / Download Citations

URL: http://www.ecice06.com/EN/10.3969/j.issn.1000-3428.2007.17.059

http://www.ecice06.com/EN/Y2007/V33/I17/173

[1]	Changhong YU, Ya LU, Haixin WANG, Ming GAO. Traffic Classification Algorithm for IoT Device Based on Sliding Time Window [J]. Computer Engineering, 2023, 49(7): 259-268.
[2]	CHEN Zhonglei, YI Peng, CHEN Xiang, HU Tao. Real-time Anomaly Detection Framework via System Calls Based on Integrated Learning [J]. Computer Engineering, 2023, 49(6): 162-169,179.
[3]	SHI Lei, ZHANG Jitao, GAO Yufei, WEI Lin, TAO Yongcai. Intrusion Detection of Network Traffic Based on Transformer and BiLSTM [J]. Computer Engineering, 2023, 49(3): 29-36,57.
[4]	LIU Qiang, ZHANG Ying, ZHOU Weixiang, JIANG Xiantao, ZHOU Weina, ZHOU Mouguo. Adaptive Class Incremental Learning-Based IoT Intrusion Detection System [J]. Computer Engineering, 2023, 49(2): 169-174.
[5]	SUN Yangwei, QI Yong. Intrusion Detection Method for In-Vehicle CAN Based on Cluster Mixed Sampling and PSO-Stacking [J]. Computer Engineering, 2023, 49(1): 138-145.
[6]	LIU Jinshuo, ZHAN Daiyi, DENG Juan, WANG Lina. Network Intrusion Detection Based on Deep Neural Network and Federated Learning [J]. Computer Engineering, 2023, 49(1): 15-21,30.
[7]	DONG Weiyu, LI Haitao, WANG Ruimin, REN Huajuan, SUN Xuekai. Network Traffic Anomaly Detection Model Based on Stacked Convolutional Attention [J]. Computer Engineering, 2022, 48(9): 12-19.
[8]	JIN Haibo, ZHAO Xinyue. High-Reliability Intrusion Detection Algorithm Under Conformal Prediction Framework [J]. Computer Engineering, 2022, 48(7): 130-140.
[9]	SHENG Long, YUAN Lina, WU Nannan, JI Shaopei. Network Anomaly Detection Model Based on GSA and DE Optimizing Hybrid Kernel ELM [J]. Computer Engineering, 2022, 48(6): 146-153.
[10]	LI Jinguo, JIAO Xubin. Research on Intrusion Detection Model in Fog Computing Environment [J]. Computer Engineering, 2022, 48(5): 43-52.
[11]	CUI Jingyang, CHEN Zhenguo, TIAN Liqin, ZHANG Guanghua. Overview of User and Entity Behavior Analytics Technology Based on Machine Learning [J]. Computer Engineering, 2022, 48(2): 10-24.
[12]	SUN Pengyu, ZHANG Hengwei, TAN Jinglei, LI Chenwei, MA Junqiang, WANG Jindong. Network Security Defense Decision Method Based on Time Game [J]. Computer Engineering, 2022, 48(11): 145-151.
[13]	NI Siyuan, HU Hongchao, LIU Wenyan, LIANG Hao. Heterogeneous Cloud Resource Allocation Algorithm Based on Rotation Strategy [J]. Computer Engineering, 2021, 47(6): 44-51,67.
[14]	YANG Yanli, SONG Lipeng. Attack Graph Generation Method Integrating Social Network Threats [J]. Computer Engineering, 2021, 47(5): 104-116.
[15]	WANG Zi, WANG Zhihua, HAN Yong, JIN Jianlong, HUANG Tianming, ZHU Jiang. Research on Mulit-Layer Cooperative Defense Model Oriented to Network Security of Power System [J]. Computer Engineering, 2021, 47(12): 131-140.

Please choose a citation manager

Content to export

Intrusion Detection Alert Correlation Techniques

入侵检测报警关联技术

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments

模态框（Modal）标题

Please choose a citation manager

Content to export

Intrusion Detection Alert Correlation Techniques

入侵检测报警关联技术

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics

Comments