摘要
针对当前分布在网络中的各种安全设备海量的报警信息,导致管理员很难从中获取有用信息的问题,文章给出了一种集成化的网络安全事件关联分析模型,并对安全事件关联流程进行了详细的描述。
Currently,there are various kinds of warning messages about the safety equipment on the internet.This situation has made it difficult for the administrators to obtain useful messages.To solve this problem,this article offers a correlation analysis model of the integrated network security incident and makes a detailed description of the process of the security incident relations.
关键词
事件关联
代理
知识库
incident relations
deputy
knowledge base
