Skip to Main Content
 

Global Search Box

 
 
 
 

Files

File List


akron1230081187.pdf (617.96 KB)

ETD Abstract Container

Abstract Header

Data Fusion Process Refinement in intrusion Detection Alert Correlation Systems

Sheets, David
http://rave.ohiolink.edu/etdc/view?acc_num=akron1230081187

Abstract Details

2008, Master of Science, University of Akron, Computer Science.
Computer systems are getting larger in size, contain a greater variety and volume of data, and communicate personal and confidential information, making security critical as well as making them appealing targets for malicious activities. The need to keep these systems secure has been approached from several different aspects, one of which is the employment of intrusion detection systems. An evolution of the intrusion detection system occurs in alert correlation systems, which take raw alerts from numerous sensors within a network and generate broader situational awareness by combining the individual findings of each sensor into a bigger picture state of the system. This study looks at improving the ability of an existing alert correlation system to pull all the relevant pieces of an intrusion into that picture in order to further reduce the output, enabling quicker analysis by a system administrator. Through experimentation and analysis, the benefits of utilizing the look-ahead system have demonstrated an ability to decrease the total number of alerts in the system, thereby reducing the work-load of system administrators by increasing the ability of the system to reduce the overall number of alerts the administrator must analyze.
Dang Xuan-Hien Thi (Advisor)
67 p.
Computer Science
Intrusion Detection; Alert Correlation; Data Fusion

Recommended Citations

Citations

  • Sheets, D. (2008). Data Fusion Process Refinement in intrusion Detection Alert Correlation Systems [Master's thesis, University of Akron]. OhioLINK Electronic Theses and Dissertations Center. http://rave.ohiolink.edu/etdc/view?acc_num=akron1230081187

    APA Style (7th edition)

  • Sheets, David. Data Fusion Process Refinement in intrusion Detection Alert Correlation Systems. 2008. University of Akron, Master's thesis. OhioLINK Electronic Theses and Dissertations Center, http://rave.ohiolink.edu/etdc/view?acc_num=akron1230081187.

    MLA Style (8th edition)

  • Sheets, David. "Data Fusion Process Refinement in intrusion Detection Alert Correlation Systems." Master's thesis, University of Akron, 2008. http://rave.ohiolink.edu/etdc/view?acc_num=akron1230081187

    Chicago Manual of Style (17th edition)

akron1230081187
799
© 2008, all rights reserved.
This open access ETD is published by University of Akron and OhioLINK.