Real-Time intrusion detection alert correlation and attack scenario extraction based on the prerequisite consequence approach

No abstract is available for this paper.

• Publication year

  2012

• Venue

  ISC Int. J. Inf. Secur.

• Publication date

  2012-07-01

• Fields of study

  Computer Science

• Identifiers
  DOI 10.22042/ISECURE.2013.4.2.4
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Alert correlation and prediction using data mining and HMM

  2011cited by this paper
• An Online Adaptive Approach to Alert Correlation

  2010cited by this paper
• Real-Time Intrusion Alert Correlation System Based on Prerequisites and Consequence

  2010cited by this paper
• Topological Vulnerability Analysis: A Powerful New Approach For Network Attack Prevention, Detection, and Response

  2008cited by this paper
• Building network attack graph for alert causal correlation

  2008cited by this paper
• IDS alarms reduction using data mining

  2008cited by this paper
• ACML: Capability Based Attack Modeling Language

  2008cited by this paper
• Modeling network intrusion detection alerts for correlation

  2007influential reference
• Using attack graphs for correlating, hypothesizing, and predicting intrusion alerts

  2006influential reference
• Correlation analysis of intrusion alerts

  2006cited by this paper
• Alert Correlation for Extracting Attack Strategies

  2006cited by this paper
• Alert correlation through triggering events and common resources

  2004cited by this paper
• Techniques and tools for analyzing intrusion alerts

  2004cited by this paper
• Comprehensive approach to intrusion detection alert correlation

  2004cited by this paper
• Practical automated detection of stealthy portscans

  2002cited by this paper
• Constructing attack scenarios through correlation of intrusion alerts

  2002influential reference
• Alert correlation in a cooperative intrusion detection framework

  2002cited by this paper
• STATL: An attack language for state-based intrusion detection

  2002cited by this paper
• Probabilistic Alert Correlation

  2001cited by this paper
• Building Scenarios from a Heterogeneous Alert Stream

  2001cited by this paper
• Managing alerts in a multi-intrusion detection environment

  2001cited by this paper
• A requires/provides model for computer attacks

  2001cited by this paper
• LAMBDA: A Language to Model a Database for Detection of Attacks

  2000cited by this paper

• An Attack Scenario Reconstruction Technology Based on Alert Correlation Analysis

  2025cites this paper
• Multilevel Intrusion Alert Post-processing for the Elimination of False Positives

  2021cites this paper
• Automatic alarm prioritization by data mining for fault management in cellular networks

  2020cites this paper
• Reducing the Number of Incidents in Converged IT Infrastructure Using Correlation Approach

  2020cites this paper
• A Quality Framework to Improve IDS Performance Through Alert Post-Processing

  2019cites this paper
• Monitoring and Improving Managed Security Services inside a Security Operation Center

  2019cites this paper
• A systematic survey on multi-step attack detection

  2018cites this paper
• Mining intrusion detection alert logs to minimise false positives & gain attack insight

  2016cites this paper
• Real-time intrusion detection system using multi-agent system

  2016cites this paper
• MONITORING AND IMPROVING MANAGED SECURITY SERVICES INSIDE A SECURITY OPERATION CENTER

  2016cites this paper
• Intrusion alert prioritisation and attack detection using post-correlation analysis

  2015cites this paper
• Risk-based intrusion response management in IDS using Bayesian decision networks

  2015cites this paper
• Human-centric training and assessment for cyber situation awareness

  2015cites this paper
• A Trust Development Model in Dynamic Ridesharing

  2014influential citation
• Alert Correlation Algorithms: A Survey and Taxonomy

  2013cites this paper