Hybrid of structural-causal and statistical model for intrusion alert correlation

• Main Author: Md. Sirat @ Md. Siraj, Maheyzah
• Format: Thesis
• Language: English
• Published: 2013
• Subjects: TK Electrical engineering. Electronics Nuclear engineering
• Online Access: http://eprints.utm.my/id/eprint/33791/5/MaheyzahMdSiratPFSKSM2013.pdf; http://eprints.utm.my/id/eprint/33791/; http://dms.library.utm.my:8080/vital/access/manager/Repository/vital:69760?site_name=Restricted Repository
• Institution: Universiti Teknologi Malaysia

The evolutions of computer network attacks have urged many organizations to install multiple Network Intrusion Detection Systems (NIDSs) for complete monitoring and detection of intrusions. Such solution produces enormous number of alerts due to repeated and false positive alerts. This contributes t...