Method of associating heterogeneous data sources for the security of communication networks et related system

摘要

this process involves a first source (4) which consists of a table, each line corresponds to an event (e _ (i) satisfying a predefined alert rule a monitoring component, and a second data source (6) consisting of binary files (f) generated by a _ m) (e) probe (3) for analysing the content of the packets.;it comprises the steps of:- provide a class warning, defined by variables, a hash function and a function of equality;for each event, a _ (i), instancier alert (a _ (i) and calculate the value of the hash function.- for each file (f _ m file to extract, analyze the possible values for the variables of the class code.using hash functions and equality, to check whether the values from an object code is instantiated; and,if so, include an identifier of the file object instantiated that warning.