Anzeige
Erschienen in:
2017 | OriginalPaper | Buchkapitel
KGBIAC: Knowledge Graph Based Intelligent Alert Correlation Framework
verfasst von : Wei Wang, Rong Jiang, Yan Jia, Aiping Li, Yi Chen
Erschienen in: Cyberspace Safety and Security
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
Alert Correlation is a key part of intrusion detection technique. Traditional methods based on the situation awareness techniques usually store the different dimensions of security information in separate knowledge bases, which leads to the lack of synergies between the various dimensions. For complex attacks, it is difficult to integrate all context information quickly to launch real-time and accurate analysis. To address these issues, we proposed an integrated intelligent security event correlation analysis system, named KGBIAC, which uses knowledge graph to represent and store the network security information. We explain the structure of KGBIAC and conduct an experiment on the DARPA 2000 dataset. Performance evaluation shows that the KGBIAC performs potentially effective.