期刊文献+

基于有向滑动时间窗的报警动态选择算法

Alert dynamic selection algorithm based on direct slide time window
下载PDF
导出
摘要 针对现有报警选择方法在实时性和精确性方面存在的不足,提出一种基于有向滑动时间窗的报警动态选择算法。依据历史关联结果的趋向特征,动态调整每个时间窗内报警抽取的概率,向历史关联强度高的时间窗分配更高的抽取概率,提高报警关联的效率和准确性。仿真结果表明,该算法在实时性上远高于报警全选方法和随机选择方法,在关联精度上优于随机选择方法。 Aiming at the insufficiency of current alert selection approaches in terms of real-time and accuracy,a alert dynamic selection approach based on direct slide time window was proposed.The abstract probability of alerts from each time window were adj usted based on the tendency feature in the history,and higher abstract probability to the higher correlation strength in the history to improve the efficiency and accuracy of alert correlation.Experimental results show that the real time performance of the proposed algorithm is much higher than that of all selection approach and random selection approach,and its correlation accuracy is superior to that of random selection approach.
出处 《计算机工程与设计》 北大核心 2015年第2期346-349,354,共5页 Computer Engineering and Design
基金 国家973重点基础研究发展计划基金项目(2011CB311801) 国家863高技术研究发展技术基金项目(2012AA012704)
关键词 报警关联 时间窗 报警选择 随机选择 关联兴趣度 alert correlation time window alert selection random selection correlation interest
  • 相关文献

参考文献10

  • 1Peng L,Chen W,Xie D,et al.Dynamically real-time anomaly detection algorithm with immune negative selection[J] .Appl Math,2013,7(3):1157-1163.
  • 2Chen S.Optimized multilevel immune learning algorithm in abnormal detection[J] .Information Technology Journal,2013,12(3):514-517.
  • 3Suarez-Tangil G,Palomar E,Pastrana S,et al.Artificial immunity-based correlation system[C] //SECRYPT,2011:422-425.
  • 4LIU J,LI Y,MENG J,et al.Intrusion detection system alerts fusion based on fuzzy comprehensive evaluation and immune evolution[J] .Journal of Computational Information Systems,2013,9(4):1509-1516.
  • 5Kabiri P,Ghorbani A.A rule-based temporal alert correlation system[J] .International Journal of Network Security,2007,5(1):66-72.
  • 6Ren H,Stakhanova N,Ghorbani A.An online adaptive approach to alert correlation[M] .Detection of Intrusions and Malware,and Vulnerability Assessment,Springer Berlin Heidelberg,2010:153-172.
  • 7Ahmadinejad H,Jalili S.Alert correlation using correlation probability estimation and time windows[C] //Proceedings of the International Conference on Computer Technology and Development,IEEE,2009:170-175.
  • 8Bateni M,Baraani A.Time window management for alert correlation using context information and classification[J] .International Journal of Computer Network&Information Security,2013,5(11):9-16.
  • 9Bateni M,Baraani A,Ghorbani A A.Using artificial immune system and fuzzy logic for alert correlation[J] .Int J Netw Secur,2013,15(1):160-174..
  • 10Elshoush H T,Osman I M.Alert correlation in collaborative intelligent intrusion detection systems-a survey[J] .Applied Soft Computing,2011,11(7):4349-4365.

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部