Tez

Browse

Now showing 1 - 1 of 1

An approach for classifying alerts of intrusion detection systems
(Bahçeşehir Üniversitesi Fen Bilimleri Enstitüsü, 2014-01) Pourabbas, Farshid; Karahoca, Adem
With the growth of the Internet networks today, security of data exchange is considered as an important task. Therefore, the use of security tools is increasing day by day. Intrusion detection systems are among these tools. They are only able to label a message received from a network as ‘alert’, but they are unable to describe system status. Some methods have been developed to solve the above problem through correlating the alerts received from intrusion detection systems. By correlating the interrelated alerts, the methods would be able to describe system status. One of the steps of correlation methods of alerts is to classify them. System status can be described well when classification is performed efficiently. Here, we present a method for classifying alerts.