Event Data Exchange and Intrusion Alert Correlation in Heterogeneous Networks
If we want to correlate alerts from various intrusion detection system (IDS) sources, its is necessary that the sources of alerts agree on what they actually are seeing, on how to report what they are seeing and on the amount of information they should report. In this paper, we review the Intrusion Detection Message Exchange Format (IDMEF) data model as an event data exchange mechanism and analyze how different correlation algorithms are being utilized in real-life systems. Based on these analyses, we propose a simple taxonomy of intrusion alert correlation algorithms, to complement the IDMEF data model.
The Colloquium™ recognizes that the protection of information and infrastructures that are used to create, store, process, and communicate information is vital to business continuity and security. The goal of The Colloquium™ is to work together to define current and emerging requirements for information assurance education and to influence and encourage the development and expansion of information assurance curricula, especially at the graduate and undergraduate levels.
If you value our mission of service, please consider making a donation, or supporting the organization through charitable pledges.
Recent Posts
29th Colloquium - Presentations
Below are the abstracts and submitted slides for paper presentations at the 29th Colloquium. Article order is alphabetical and features works corresponding to CISSE™ and CCERP tracks. We kindly ask authors and presenters to please consider sending your presentation media to Andrew so they can be included in the conference proceedings.
29th Colloquium - Impact Summary
The 29th Colloquium brought together educators, researchers, industry experts, and government leaders to advance cybersecurity education in an era defined by AI and rapid technological change. This impact summary highlights the reach, participation, and collective achievements that made this year’s event one of our most engaged and successful gatherings this decade.
|
© 2025 CISSE™. All rights reserved. This copyright notice applies only to website content on CISSE.info. It does not apply to the Open Journal platform at CISSE.info/journal. All journal articles are © their respective authors and published under the CC BY 4.0 license. |