Книга: Homam El-Taj and Omar Amer «Network Alert Management System For IDS False Positive Reduction»
|
Производитель: "LAP Lambert Academic Publishing" Every secure system has the possibility to fail. Therefore, extra effort should be taken to protect these systems. Intrusion detection systems (IDSs) had been proposed with the aim of providing extra protection to security systems. IDS is a powerful computer security system used to secure the computer environments. These systems trigger thousands of alerts per day, which prompt security analysts to verify each alert for relevance and severity based on an aggregation and correlation criterion. This Book presents a new IDS Alerts Management System IDSAMS) which is a parallel system used to manage the IDS alerts, reduce the false positive by aggregating and correlating the IDS alerts to give full understanding of the network attacks as well as easing the process for the analysts and save their time. IDS Alerts management system is a standalone system which can work based on real alerts from an online data or offline data as full a Forensic Investigation System. ISBN:9783847336983 Издательство: "LAP Lambert Academic Publishing" (2013)
ISBN: 9783847336983 |
См. также в других словарях:
Intrusion detection system — An intrusion detection system (IDS) is a device or software application that monitors network and/or system activities for malicious activities or policy violations and produces reports to a Management Station.[1] Some systems may attempt to stop … Wikipedia
