【摘要】 提出了一种基于多层模糊综合评判的报警验证方法,此方法不但可以有效地减少误报,还可以对不同情况下的无关报警进行滤除和标记等不同的操作,很好地处理验证过程中的各种不确定因素。所得的报警相关度参数有利于制定细致、灵活的报警处理策略,从而对报警进行更深入的自动化处理。更多还原

【Abstract】 An alert verification approach based on multi-level fuzzy comprehensive evaluation was presented. Experiments prove that it is effective to reduce false alerts and irrelevant alerts. The algorithm can deal with the uncertainties better than other alert verification approaches. The relevance score vectors obtained from the algorithm facilitate the formulation of fine and flexible security policies, and further alert processing.更多还原