원문정보
초록
영어
For the shortcomings of traditional network security alarm correlation method, combined with the original alarm information privacy protection needs. On the basis of analyzing the characteristics of multi-step attack, proposed the use of sequential pattern mining techniques associated with rapid multi-step attack methods QSPM. And on this basis, proposed privacy protection security alarm multistep attack sequence pattern mining method PPSPM, Achieve the associated sequence of events following the invasion premise security. Experiments show that the algorithm makes quantitative analysis. And compared with typical sequential pattern mining algorithm. Results show the new methods have a positive accuracy and efficiency.
목차
1. Introduction
2. Related Theory
2.1. Sequential Pattern Mining
2.2. Analysis of Multi-step Attack Characteristics
2.3. Sequential Pattern Mining Method
3. Design of Intrusion Event Sequence Correlation Method
3.1. Definition
3.2. Design of Quick Sequential Pattern Mining Algorithm
3.3. Design of Privacy Preserving Sequential Pattern Mining (PPSPM) Algorithm
4. Experimental Analysis and Results
4.1. Validity Analysis
4.2. Performance Analysis
5. Conclusion
References