Intrusion alert analysis is an attractive and active topic in the area of intrusion detection
systems. In recent decades, many research communities have been working in this field …

As telecommunication networks evolve rapidly in terms of scalability, complexity, and
heterogeneity, the efficiency of fault localization procedures and the accuracy in the …

While bigdata system processes high-volume data at high speed, it also generates a large
amount of logs. However, it is hard for people to predict future events based on massive …

This paper introduces a graph‐based attack description that comes with different analysis
methods for alert correlation. The system encompasses an attack scenario detection …

Currently available intrusion detection systems focus mainly on determining uncharacteristic
system events in distributed networks using signature based approach. Due to its limitation …

Intrusion detection systems (IDSs) are the fundamental parts of any network security
infrastructure given their role as layers of defense against hackers. However, IDSs generate …

Malware is a type of malicious program that replicate from host machine and propagate
through network. It has been considered as one type of computer attack and intrusion that …

Distributed and coordinated attacks in computer networks are causing considerable
economic losses worldwide in recent years. This is mainly due to the transition of attackers' …

Alert correlation analyzes the alerts from one or more collaborative Intrusion Detection
Systems (IDSs) to produce a concise overview of security-related activity on the network …

Information Technology (IT) usage in enterprises has evolved over the last years. This led to
today's complex, heterogeneous, and dynamic IT system landscapes that support business …