A Mission-Impact-Based Approach to INFOSEC Alarm Correlation

We describe a mission-impact-based approach to the analysis of security alerts produced by spatially distributed heterogeneous information security (INFOSEC) devices, such as firewalls, intrusion detection systems, authentication services, and antivirus software. The intent of this work is to delive...

Ausführliche Beschreibung

Bibliographische Detailangaben

Hauptverfasser:	Porras, Phillip A., Fong, Martin W., Valdes, Alfonso
Format:	Tagungsbericht
Sprache:	eng
Schlagworte:	alert management alert prioritization Applied sciences Computer science control theory systems Exact sciences and technology intrusion report correlation Memory and file management (including protection and security) Memory organisation. Data processing Network security Software
Online-Zugang:	Volltext
Tags:	Tag hinzufügen Keine Tags, Fügen Sie den ersten Tag hinzu!