Techniques and tools for analyzing intrusion alerts

No abstract is available for this paper.

• Publication year

  2004

• Venue

  TSEC

• Publication date

  2004-05-01

• Fields of study

  Computer Science, Engineering

• Identifiers
  DOI 10.1145/996943.996947
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Editorial

  2005cited by this paper
• Intrusion Detection Message Exchange Format Data Model and Extensible Markup Language (XML) Document Type Definition

  2004cited by this paper
• Analyzing Intensive Intrusion Alerts via Correlation

  2002influential reference
• Constructing attack scenarios through correlation of intrusion alerts

  2002cited by this paper
• STATL: An attack language for state-based intrusion detection

  2002cited by this paper
• A Mission-Impact-Based Approach to INFOSEC Alarm Correlation

  2002cited by this paper
• Alert correlation in a cooperative intrusion detection framework

  2002cited by this paper
• Automated generation and analysis of attack graphs

  2002cited by this paper
• A Toolkit for Intrusion Alerts Correlation based on Prerequisites and Consequences of Attacks

  2002cited by this paper
• M2D2: A Formal Data Model for IDS Alert Correlation

  2002cited by this paper
• Practical automated detection of stealthy portscans

  2002cited by this paper
• Fusing A Heterogeneous Alert Stream Into Scenarios

  2002cited by this paper
• Two formal analyses of attack graphs

  2002cited by this paper
• Mining alarm clusters to improve alarm handling efficiency

  2001cited by this paper
• Abstraction-based intrusion detection in distributed environments

  2001cited by this paper
• A requires/provides model for computer attacks

  2001cited by this paper
• Aggregation and Correlation of Intrusion-Detection Alerts

  2001cited by this paper
• Probabilistic Alert Correlation

  2001influential reference
• Managing alerts in a multi-intrusion detection environment

  2001cited by this paper
• NIST Special Publication on Intrusion Detection Systems

  2001cited by this paper
• LAMBDA: A Language to Model a Database for Detection of Attacks

  2000cited by this paper
• A Data Mining Analysis of RTID Alarms

  2000cited by this paper
• Using model checking to analyze network vulnerabilities

  2000cited by this paper
• Intrusion detection

  1999cited by this paper
• NetSTAT: A network-based intrusion detection system

  1999cited by this paper
• INTEGRATED EVENT MANAGEMENT: EVENT CORRELATION USING DEPENDENCY GRAPHS

  1998cited by this paper
• Abstraction-based misuse detection: high-level specifications and adaptable strategies

  1998cited by this paper
• Pattern discovery and specification techniques for alarm correlation

  1998cited by this paper
• Modeling Correlated Alarms in Network Management Systems

  1996cited by this paper
• Classification and detection of computer intrusions

  1996cited by this paper
• GrIDS A Graph-Based Intrusion Detection System for Large Networks

  1996cited by this paper
• State Transition Analysis: A Rule-Based Intrusion Detection Approach

  1995cited by this paper
• The NIDES Statistical Component Description and Justification

  1994cited by this paper
• Network intrusion detection

  1994cited by this paper
• A PATTERN MATCHING MODEL FOR MISUSE INTRUSION DETECTION

  1994cited by this paper
• Mining association rules between sets of items in large databases

  1993cited by this paper

• Host-Based Intrusion Detection for Industrial Control Systems

  2025cites this paper
• A Method for Network Security Situation Assessment Based on Multi-source Feature Fusion in Big Data

  2024cites this paper
• Temporal-Gated Graph Neural Network with Graph Sampling for Multi-step Attack Detection

  2023cites this paper
• Survey of Technology in Network Security Situation Awareness

  2023cites this paper
• Enhancing Security in 5G Networks: A Hybrid Machine Learning Approach for Attack Classification

  2023cites this paper
• An effective attack scenario construction model based on identification of attack steps and stages

  2023cites this paper
• A threat recognition solution of edge data security in industrial internet

  2022cites this paper
• Multi-step attack threat recognition algorithm based on attribute association in internet of things security

  2022cites this paper
• Cyber-Attack Prediction Based on Network Intrusion Detection Systems for Alert Correlation Techniques: A Survey

  2022cites this paper
• FIXME: Enhance Software Reliability with Hybrid Approaches in Cloud

  2021cites this paper
• Exploiting the Outcome of Outlier Detection for Novel Attack Pattern Recognition on Streaming Data

  2021cites this paper
• An incremental intrusion detection model using alarms correlation

  2021cites this paper
• Multilevel Intrusion Alert Post-processing for the Elimination of False Positives

  2021cites this paper
• An Effective Attack Scenario Construction Model based on Attack Steps and Stages Identification

  2021cites this paper
• Research Progress and Future Trend Analysis of Network Security Situational Awareness

  2021cites this paper
• An enhanced network intrusion detection system for malicious crawler detection and security event correlations in ubiquitous banking infrastructure

  2021cites this paper
• Systematic Review and Quantitative Comparison of Cyberattack Scenario Detection and Projection

  2020influential citation
• An Efficient Alert Aggregation Method Based on Conditional Rough Entropy and Knowledge Granularity

  2020cites this paper
• A review of attack graph and attack tree visual syntax in cyber security

  2020cites this paper
• More honour'd in the breach: predicting non-compliant behaviour through individual, situational and habitual factors

  2020cites this paper
• Secure-by-synthesis network with active deception and temporal logic specifications

  2020cites this paper
• Analysis of IDS Alert Correlation Techniques for Attacker Group Recognition in Distributed Systems

  2020cites this paper
• An Approach to Meta-Alert Generation for Anomalous TCP Traffic

  2019cites this paper
• A Survey of Network Security Situational Awareness Technology

  2019cites this paper
• Survey of Network Security Situational Awareness

  2019cites this paper
• Alerts Clustering for Intrusion Detection Systems: Overview and Machine Learning Perspectives

  2019cites this paper
• A Quality Framework to Improve IDS Performance Through Alert Post-Processing

  2019influential citation
• A Design and Simulation of Adaptive Intrusion Detection System Based on Data Mining

  2018cites this paper
• Dealing with Interleaved Event Inputs for Intrusion Detection

  2018cites this paper
• Network threat detection based on correlation analysis of multi-platform multi-source alert data

  2018cites this paper
• A systematic survey on multi-step attack detection

  2018cites this paper
• An IDS Alerts Aggregation Algorithm Based on Rough Set Theory

  2018cites this paper
• Review of network security risk assessment methods

  2017cites this paper
• Association Analysis Of Cyber-Attack Attribution Based On Threat Intelligence

  2017cites this paper
• Study of Alert Correlation Technique

  2017cites this paper
• Alert correlation analysis based on attack path graph

  2017cites this paper
• Non-SPF routing algorithm based on ordered semi-group preference algebra

  2017cites this paper
• An Empirical Evaluation of the Effectiveness of Attack Graphs and Fault Trees in Cyber-Attack Perception

  2017cites this paper
• Development of a Model of Individual, Contextual and Situational Factors to Predict Compliant Behavior.

  2017cites this paper
• Study of Threat Scenario Reconstruction based on Multiple Correlation

  2017cites this paper
• An alert analysis approach to DDoS attack detection

  2016cites this paper
• Quantitative threat situation assessment based on alert verification

  2016cites this paper
• A multi-step attack-correlation method with privacy protection

  2016cites this paper
• An attack graph generation method based on heuristic searching strategy

  2016cites this paper
• GSLAC: A General Scalable and Low-Overhead Alert Correlation Method

  2016cites this paper
• A comprehensive approach for network attack forecasting

  2016cites this paper
• Rice Seed Germination Analysis

  2016cites this paper
• A Bottom-Up Approach to Applying Graphical Models in Security Analysis

  2016cites this paper
• A Framework for Big Data Security Analysis and the Semantic Technology

  2016cites this paper
• Design and Implementation of A Network Security Management System

  2016cites this paper
• A Review of Intrusion Alerts Correlation Frameworks

  2016cites this paper
• A privacy-preserving multi-step attack correlation algorithm

  2016cites this paper
• A Simulation Based SIEM Framework to Attribute and Predict Attacks Candidate

  2015cites this paper
• Automated Verification Methodology of Security Events Based on Heuristic Analysis

  2015cites this paper
• Network access and admission restriction using traffic monitoring and vulnerability detection

  2015influential citation
• Intrusion detection alert management for high-speed networks: current researches and applications

  2015cites this paper
• A Method of Network Security Situation Assessment Based on Hidden Markov Model

  2015cites this paper
• Network Security Situation Assessment: A Review and Discussion

  2015cites this paper
• MAD: A Middleware Framework for Multi-step Attack Detection

  2015cites this paper
• Towards Predictive Real-time Multi-sensors Intrusion Alert Correlation Framework

  2015cites this paper
• A Complete Bibliography of ACM Transactions on Information and System Security

  2015cites this paper
• Business driven alerts correlation in network management environments

  2015cites this paper
• Knowledge-Based Model to Represent Security Information and Reason About Multi-stage Attacks

  2015cites this paper
• Real Time Intrusion Alert Aggregation for Distributed Intrusion Detection System and Prevention of Attacks

  2015cites this paper
• The AC-Index: Fast Online Detection of Correlated Alerts

  2015cites this paper
• Privacy-preserving approach for sharing and processing intrusion alert data

  2015influential citation
• A study on cyber threat prediction based on intrusion detection event for APT attack detection

  2014cites this paper
• NSAS : NETWORK SECURITY AWARENESS SYSTEM

  2014cites this paper
• Human perspective to anomaly detection for cybersecurity

  2014influential citation
• Online Intrusion Detection System Modeling

  2014cites this paper
• Online Intrusion Alert Aggregation with GDSM

  2014cites this paper
• Discovering anomaly on the basis of flow estimation of alert feature distribution

  2014cites this paper
• A Correlation Method for Identifying Slow Attacks

  2014cites this paper
• Online Intrusion Alert Aggregation with Generative Data Stream Modeling

  2014cites this paper
• A response selection model for intrusion response systems: Response Strategy Model (RSM)

  2014influential citation
• An Approach of Discovering Causal Knowledge for Alert Correlating Based on Data Mining

  2014cites this paper
• An Approach of Discovering Causal Knowledge for Alert Correlating Based on Data Mining

  2014cites this paper
• Counter Cyber Attacks By Semantic Networks

  2014cites this paper
• An Architecture for Alert Correlation Inspired By a Comprehensive Model of Human Immune System

  2014cites this paper
• A Survey of Intrusion Alert Correlation and Its Design Considerations

  2014cites this paper
• An Auto-Verification Method of Security Events Based on Empirical Analysis for Advanced Security Monitoring and Response;*

  2014cites this paper
• A Cooperative Model for IS Security Risk Management in Distributed Environment

  2014cites this paper
• False alarm minimization techniques in signature-based intrusion detection systems: A survey

  2014cites this paper
• Network security situation awareness based on network simulation

  2014cites this paper
• A wireless multi-step attack pattern recognition method for WLAN

  2014cites this paper
• Techniques to Model and Derive a Cyber-Attacker’s Intelligence

  2013cites this paper
• Event correlation for detecting advanced multi-stage cyber-attacks

  2013cites this paper
• Some Special Issues of Network Security Monitoring on Big Data Environments

  2013cites this paper
• AN AIS-INSPIRED ARCHITECTURE FOR ALERT CORRELATION

  2013influential citation
• Alert Correlation Algorithms: A Survey and Taxonomy

  2013cites this paper
• A Real Time Adaptive Intrusion Detection Alert Classifier for High Speed Networks

  2013cites this paper
• Time Window Management for Alert Correlation using Context Information and Classification

  2013cites this paper
• Semi-Supervised Classification and its Application to Filtering IDS False Positives

  2013cites this paper
• Incident prioritisation using analytic hierarchy process (AHP): Risk Index Model (RIM)

  2013cites this paper
• Detection of Botnet Multi-Stage Attack By Using Alert Correlation Model

  2013cites this paper
• Discovering Multi-stage Attacks Using Closed Multi-dimensional Sequential Pattern Mining

  2013cites this paper
• An alert correlation-based approach to detecting intrusion

  2013cites this paper
• A Comparative Study of Alert Correlations for Intrusion Detection

  2013cites this paper
• Alert Correlation through a Multi Components Architecture

  2013cites this paper
• An approach to the correlation of security events based on machine learning techniques

  2013cites this paper