节点文献
基于多组件分析的报警融合
Alert Fusion Based on Multi-component Analysis
【摘要】 报警融合包括报警的规范、验证、聚合和关联,基于多组件分析的报警融合模型能实现报警融合的各个环节,成为安全管理和入侵检测领域研究的前沿课题。实验结果证明,该模型是可行的、有效的。
【Abstract】 Alert fusion includes alert normalization,verification,aggregation and correlation.Alert fusion model based on multi-component analysis can implement each aspect of alert fusion.The module is the leading issue of safety management and research of intrusion detection field.Experimental results show that the model is effective and efficient.
【关键词】 网络安全;
安全管理;
报警融合;
攻击场景;
【Key words】 Network security; Security management; Alert fusion; Attack scenario;
【Key words】 Network security; Security management; Alert fusion; Attack scenario;
- 【文献出处】 计算机工程 ,Computer Engineering , 编辑部邮箱 ,2006年22期
- 【分类号】TP393.08
- 【被引频次】3
- 【下载频次】87