Correlation Analysis Approach About Numerous Security Information and Event in Telecommunication Network

Ning Fan; Guoshui Shi; Jun Shen; Huamin Jin

doi:10.3969/j.issn.1000-0801.2013.10.029

您当前的位置：

首页 >

文章列表页 >

Correlation Analysis Approach About Numerous Security Information and Event in Telecommunication Network

Operational Innovation Forum | 更新时间：2024-06-05

- Correlation Analysis Approach About Numerous Security Information and Event in Telecommunication Network
- Telecommunications Science Vol. 29, Issue 10, Pages: 168-172(2013)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.1000-0801.2013.10.029
  CLC：
- Published Online：2013-10，
  
  Published：20 October 2013
- 稿件说明：
移动端阅览
Ning Fan, Guoshui Shi, Jun Shen, et al. Correlation Analysis Approach About Numerous Security Information and Event in Telecommunication Network[J]. Telecommunications science, 2013, 29(10): 168-172.
DOI：

Ning Fan, Guoshui Shi, Jun Shen, et al. Correlation Analysis Approach About Numerous Security Information and Event in Telecommunication Network[J]. Telecommunications science, 2013, 29(10): 168-172. DOI： 10.3969/j.issn.1000-0801.2013.10.029.

摘要

关联分析引擎通过把孤立的安全事件集合关联为一个安全事件链，从大量误报告警与低级别告警中找出真正威胁告警，是安全运营中心分析安全态势、做出及时响应的关键技术模块。提出了一种结合状态机与推理机两类关联分析机制优点的关联分析引擎技术——基于序列状态推导的关联分析引擎，通过自动序列控制攻击场景规则的匹配，实现高效准确的海量安全事件的关联分析，能够较好地解决传统关联分析引擎在电信级网络应用中的问题。

Abstract

Correlation analysis engine which correlate isolated security event as a chain to find out the real threat from a large number of false alarms or low level ones

is a key module of security operations centre（SOC）.The traditional correlation analysis mechanism is divided into two types:state machine and inference-engine.For poor precision and low efficiency

they don't adapt telecom network application.A new correlation analysis mechanism based on consecutive state by inference-engine was presented

which executed efficiently and accurately

to solve the problems of correlation analysis engine applied in telecom network.

关键词

Keywords

references

史简，郭山清，谢立 . 统一网络安全管理平台的研究与实现 . 计算机应用研究， 2006 （ 9 ）: 92 ～ 97

Harel D . Statecharts:a visual formalism for complex systems . Science of Computer Programming , 1987 （ 8 ）: 231 ～ 274

Dain O M , Cunningham R K . Building scenarios from a heterogeneous alert stream . Proceeding of the 2001 IEEE Workshop on Information Assurance and Security , United States Military Academy,West Point , NY,USA , 2001 : 231 ～ 235

陈春霞，黄皓 . 攻击模型的分析与研究 . 计算机应用研究， 2005 （ 7 ）: 115 ～ 118

姚键，叶保留，蔡圣闻等 . 安全管理研究综述 . 计算机科学， 2004 , 31 （ 8 ）: 1 ～ 4

Views

356

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

⁰