基于贝叶斯网络的告警相关算法研究  

Research of Alert Correlation Based on Bayesian Network

作　　者：秦拯[1] 沈亚敏[1] 

机构地区：[1]东莞理工学院,广东东莞523106

出　　处：《长沙电力学院学报（自然科学版）》2005年第3期69-72,共4页JOurnal of Changsha University of electric Power:Natural Science

基　　金：湖南省科技攻关项目(04GK3022);东莞市科研发展基金资助(2004B1037)

摘　　要：将代价敏感应用于告警相关,运用贝叶斯网络判断告警代价,将考虑代价的部分放入整个相关框架中,以减少告警相关的时间,提高响应速度.实验结果表明,该方法能有效的分离出重要的告警.Since different type of attacks aimed at different computers make different damage, the authors propose the conception of cost-sensitive in alert correlation and judge the alert cost based on Bayesian network, which is inserted into the cal experiments show that correlation process. This can speed up the correlation and response rapidly. Empirithis method can separate the important alerts correctly.

关 键 词：入侵检测 告警相关 贝叶斯网络 代价敏感 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]