摘要： 分析了网络中大规模安全告警事件处理面临的问题,提出了一种分布式安全事件检测系统模型,在对事件分类的基础上,提出了基于策略的分层事件处理机制,阐述了一种基于二叉树遍历和滑动时间窗口的事件检测算法,进一步提高了事件检测的及时性和准确性,为网络系统的安全提供了可靠的保障。

关键词: 复合事件, 简单事件, 二叉树, 滑动时间窗, Agent

Abstract: This paper analyzes the problem of sweeping security alarm event disposing in a system of network security, presents a distributedsecurity event monitoring model, basing on classify of network events, presents a policy-based hierarchical event-processing mechanism,bintree-based and glide time-windows mechanism improves the real-time and veracity of event-monitoring, safeguards the security of network.

中图分类号: 

• TP393.08