Comprehensive approach to intrusion detection alert correlation
By Fredrik Valeur, Giovanni Vigna, Christopher Krügel, Richard A. Kemmerer. IEEE Transactions on Dependable and Secure Computing, 2004
568 citations recorded by the source corpus.
Subfields: Artificial Intelligence, Computer Networks and Communications, Signal Processing
View Paper: https://www.semanticscholar.org/paper/4506f9343ab688171bcb3a1818f132b3b91588a5
How researchers see this paper
The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.
In Artificial Intelligence
- Wenke Lee
- Guofei Gu
- Ali Akbar Ghorbani
- Vinod Yegneswaran
- Phillip A. Porras
- Hadi Shiravi
- Ali Shiravi
- Martin W. Fong
In Computer Networks and Communications
- Wenke Lee
- Guofei Gu
- Ali Akbar Ghorbani
- Vinod Yegneswaran
- Phillip A. Porras
- Hadi Shiravi
- Ali Shiravi
- Martin W. Fong
In Signal Processing
- Wenke Lee
- Guofei Gu
- Ali Akbar Ghorbani
- Vinod Yegneswaran
- Phillip A. Porras
- Martin W. Fong
- Pavel Laskov
- Charu C. Aggarwal
Citations in the corpus
- A Survey of Visualization Systems for Network Security (2012, background): “For this reason, they are placed into bins of 100’s, registered ports (<50;000) are placed into bins of 10,000’s, and the remaining private/dynamic ports (50,000-65,535) are placed into a single bin.”
- BotHunter: Detecting Malware Infection Through IDS-Driven Dialog Correlation (2007, methodology): “In [43], multistep attack correlation is performed on attack scenarios specified (a priori) using STATL [16], which is a language for expressing attacks as states and transitions.”