Abstract
In this paper three light-weighted detectors have been developed in order to protect the key host. Alerts from each detector have been aggregated and correlated in the spatio-temporal space. Due to the uncertainty in describing attacks, the rough set theory has been applied into the aggregation of alerts in the spatial space. Experiments show that this way can not only reduce the amount of futile and repetitive alerts but also increase the detection rate.
| Original language | English |
|---|---|
| Pages (from-to) | 27-28+210 |
| Journal | Jisuanji Gongcheng/Computer Engineering |
| Volume | 31 |
| Issue number | 7 |
| Publication status | Published - 5 Apr 2005 |
Keywords
- Cooperative Intrusion detection system
- Network security
- Rough set theory