Intrusion sensing probe alarm set classifying process for use in information security system, involves constructing lattice for each alarm originated from intrusion sensing probes, and merging lattices to form general lattice

摘要

The process involves organizing attributes of each attribute domain into a hierarchical structure comprising several levels. A lattice is constructed for each alarm originated from intrusion sensing probes (11a-11c) according to the structure. The lattices are iteratively merged to form a general lattice. Alarms that are pertinent and general are identified to produce synthetic alarms for an output unit of an alarm management system. An independent claim is also included for a computer program implementing a process for classifying alarm sets.