【摘要】 将代价敏感应用于告警相关,运用贝叶斯网络判断告警代价,将考虑代价的部分放入整个相关框架中,以减少告警相关的时间,提高响应速度.实验结果表明,该方法能有效的分离出重要的告警.更多还原

【Abstract】 Since different type of attacks aimed at different computers make different damage, the authors propose the conception of cost-sensitive in alert correlation and judge the alert cost based on Bayesian network, which is inserted into the correlation process. This can speed up the correlation and response rapidly. Empirical experiments show that this method can separate the important alerts correctly.更多还原