ALERT CORRELATION USING SUPPORT VECTOR MACHINE FOR MULTI INTRUSION DETECTION SYSTEMS

XIAOYUN YE; MYUNG-MOOK HAN

首页> 外文期刊>Journal of Theoretical and Applied Information Technology >ALERT CORRELATION USING SUPPORT VECTOR MACHINE FOR MULTI INTRUSION DETECTION SYSTEMS

【24h】

ALERT CORRELATION USING SUPPORT VECTOR MACHINE FOR MULTI INTRUSION DETECTION SYSTEMS

机译：使用支持向量机的多入侵检测系统进行警报关联

获取原文

掌桥外文数据库（机构版） >>

开具论文收录证明 >>

文献代查 >>

页面导航

摘要
著录项
相似文献
相关主题

摘要

This paper presents a new alert correlation model for multiple intrusion detection systems. Based on the analysis of the complex relationship between the alert information of the intrusion detection system, an alert fusion model is proposed and used to alert correlation. The SVM algorithm has an advantage in the multi-dimensional classification, which can further reduce the influence of false positives and false negatives. The experimental results show that the alert fusion model has high accuracy and low false positive.

机译：本文提出了一种用于多个入侵检测系统的新警报关联模型。在分析入侵检测系统的预警信息之间的复杂关系的基础上，提出了一种预警融合模型并将其用于预警关联。 SVM算法在多维分类中具有优势，可以进一步减少误报和误报的影响。实验结果表明，预警融合模型具有较高的准确性和较低的误报率。

著录项

来源
《Journal of Theoretical and Applied Information Technology》 |2018年第2期|共8页
作者
XIAOYUN YE; MYUNG-MOOK HAN;
展开▼
作者单位

展开▼
收录信息
原文格式 PDF
正文语种
中图分类计算技术、计算机技术;
关键词

相似文献

外文文献
中文文献
专利

1. Multi-level hybrid support vector machine and extreme learning machine based on modified K-means for intrusion detection system [J] . Al-Yaseen Wathiq Laftah, Othman Zulaiha Ali, Nazri Mohd Zakree Ahmad Expert Systems with Application . 2017,第jana期

机译：基于改进的K均值的入侵检测系统多级混合支持向量机和极限学习机
2. Managing Intrusion Detection Alerts Using Support Vector Machines [J] . Majid Ghonji Feshki, Minoo Deljavan Anvary, Omid Sojoodi International Journal of Computer Science and Security . 2015,第5期

机译：使用支持向量机管理入侵检测警报
3. A novel weighted support vector machines multiclass classifier based on differential evolution for intrusion detection systems [J] . Aburomman Abdulla Amin, Reaz Mamun Bin Ibne Information Sciences: An International Journal . 2017,第期

机译：一种新型加权支撑载体机基于差分演进的入侵检测系统的多标量级
4. Multistep Attack Detection and Alert Correlation in Intrusion Detection Systems [C] . Fabio Manganiello, Mirco Marchetti, Michele Colajanni International Conference on Information Security and Assurance . 2011

机译：侵入检测系统中的多步攻击检测和警报相关性
5. A novel alert correlation and confidence fusion framework in intrusion detection systems. [D] . Yu, Dong. 2006

机译：入侵检测系统中一种新颖的警报关联和置信度融合框架。
6. Support Vector Machine-Based Transmit Antenna Allocation for Multiuser Communication Systems [O] . Huifa Lin, Won-Yong Shin, Jingon Joung 2019

机译：支持矢量机器的发射天线分配用于多用户通信系统
7. A framework for correlation and aggregation of security alerts in communication networks. A reasoning correlation and aggregation approach to detect multi-stage attack scenarios using elementary alerts generated by Network Intrusion Detection Systems (NIDS) for a global security perspective. [O] . Alserhani Faeiz 2011

机译：通信网络中安全警报的关联和聚合框架。一种推理相关和聚合方法，可使用网络入侵检测系统（NIDS）生成的基本警报来检测多阶段攻击情形，以实现全球安全性。

ALERT CORRELATION USING SUPPORT VECTOR MACHINE FOR MULTI INTRUSION DETECTION SYSTEMS

摘要

著录项

相似文献

相关主题

期刊订阅