Empirical Analysis and Validation of Security Alerts Filtering Techniques

摘要

System administrators cope with security incidents through a variety of monitors, such as intrusion detection systems, event logs, security information and event management systems. Monitors generate large volumes of alerts that overwhelm the operations t