Using Time Series 3D AlertGraph and False Alert Classification to Analyse Snort Alerts

机译：使用时间序列3D Alertgraph和False Alert分类来分析Snort警报

获取原文

页面导航

摘要
著录项
相似文献
相关主题

摘要

A top-level overview of Snort alerts using 3D visual and alert classification is discussed. This paper describes the top-level view (time series 3D AlertGraph) with the integration of alert classification to visualise Snort alerts. The advantages of using this view are (1) It summarised the alerts into different colours to indicate the quantity of alerts from (SRCIP, DPORT) pairs; (2) It used alert classification to highlight the true alerts; (3) Through interaction tools, the alerts can be highlighted according to the source IP, destination IP or destination port;. (4) A large numbers of alerts can be viewed in a single display and (5) A temporal characteristic of attacks can be discovered.

机译：讨论了使用3D视觉和警报分类的Snort警报的顶级概述。本文介绍了顶级视图（时间序列3D Alertgraph），并集成了警报分类以可视化Snort警报。使用此视图的优点是（1）总结了警报以不同的颜色，以指示来自（SRCIP，DPORT）对的警报数量; （2）它使用警报分类来突出真正的警报; （3）通过交互工具，可以根据源IP，目标IP或目标端口突出显示警报; （4）可以在单个显示中查看大量警报，并且（5）可以发现攻击的时间特征。

著录项

来源
《International Workshop on Visualization for Computer Security》|2008年||共12页
会议地点
作者
Shahrulniza Musa; David J. Parish;
展开▼
作者单位

展开▼
会议组织
原文格式 PDF
正文语种
中图分类 TP3-53;
关键词
machine learning; alert visualization; network security information visualization; alert classification;

机译：机器学习;警报可视化;网络安全信息可视化;警报分类;

相似文献

外文文献
中文文献
专利

1. Comparison of 'time to detection' values between BacT/ALERT VIRTUO and BacT/ALERT 3D instruments for clinical blood culture samples [J] . Francesco Congestrì, Maria Federica Pedna, Michela Fantini, International journal of infectious diseases : . 2017,第Supplementa1期

机译：BacT / ALERT VIRTUO和BacT / ALERT 3D仪器用于临床血液培养样品的“检测时间”值的比较
2. New Alert Message Settings for the XN-series Automated Hematology Analyzer Are Useful for Avoiding Falsely High WBC Counts and to Detect Specimens with Giant Platelets [J] . Inaba Tohru, Shimomoto Bunta, Yuki Yoichi, Annals of Clinical and Laboratory Science: Official Journal of the Association of Clinical Scientists . 2017,第5期

机译：XN系列自动血液分析仪的新警报消息设置对于避免虚假的WBC计数，并检测具有巨大血小板的标本
3. 2B‐Alert 2B‐Alert App: A mobile application for real‐time individualized prediction of alertness [J] . Reifman Jaques, Ramakrishnan Sridhar, Liu Jianbo, Journal of sleep research . 2019,第2期

机译：2B-Alert 2B-Alert应用程序：用于实时个性化预测的移动应用程序
4. Using Time Series 3D AlertGraph and False Alert Classification to Analyse Snort Alerts [C] . Shahrulniza Musa, David J. Parish Visualization for Computer Security . 2008

机译：使用时间序列3D AlertGraph和错误警报分类来分析Snort警报
5. Measures to Decrease the Volume of False Positive Alerts in the Transaction Monitoring Process [D] . Lucchetti, Umberto, Jr. 2018

机译：减少交易监控过程中误报的数量的措施
6. A Potential Answer to the Alert Override Riddle: Using Patient Attributes to Predict False Positive Alerts [O] . Timothy I. Kennell, Jr., James J. Cimino 2019

机译：警报替代难题的潜在答案：使用患者属性预测误报
7. Visualising network security attacks with multiple 3D visualisation and false alert classification [O] . Musa Shahrulniza 2008

机译：通过多种3D可视化和错误警报分类可视化网络安全攻击
8. Generating Artificial Snort Alerts and Implementing SELK: The Snort-Elasticsearch-Logstash-Kibana Stack. [R] . Krych, D. E., Edwards, J., Braun, T. 2017

机译：生成人工snort警报并实现sELK：snort-Elasticsearch-Logstash-Kibana堆栈。

Using Time Series 3D AlertGraph and False Alert Classification to Analyse Snort Alerts

摘要

著录项

相似文献

相关主题

期刊订阅