A Model-based Survey of Alerts Correlation Techniques

dc.contributor.author Salah, Saeed
dc.contributor.author Maciá Fernández, Gabriel
dc.contributor.author Díaz-Verdejo, J. E.
dc.date.accessioned 2021-09-20T19:43:56Z
dc.date.available 2021-09-20T19:43:56Z
dc.date.issued 2013-04
dc.description.abstract As telecommunication networks evolve rapidly in terms of scalability, complexity, and heterogeneity, the efficiency of fault localization procedures and the accuracy in the detection of anomalous behaviors are becoming important factors that largely influence the decision making process in large management companies. For this reason, telecommunication companies are doing a big effort investing in new technologies and projects aimed at finding efficient management solutions. One of the challenging issues for network and system management operators is that of dealing with the huge amount of alerts generated by the managed systems and networks. In order to discover anomalous behaviors and speed up fault localization processes, alert correlation is one of the most popular resources. Although many different alert correlation techniques have been investigated, it is still an active research field. In this paper, a survey of the state of the art in alert correlation techniques is presented. Unlike other authors, we consider that the correlation process is a common problem for different fields in the industry. Thus, we focus on showing the broad influence of this problem. Additionally, we suggest an alert correlation architecture capable of modeling current and prospective proposals. Finally, we also review some of the most important commercial products currently available. en_US
dc.identifier.citation Salah, S., Maciá-Fernández, G., & Díaz-Verdejo, J. E. (2013). A model-based survey of alert correlation techniques. Computer Networks, 57(5), 1289-1317. en_US
dc.identifier.uri https://dspace.alquds.edu/handle/20.500.12213/6451
dc.language.iso en_US en_US
dc.publisher Computer Networks - Elsevier en_US
dc.subject Alert correlation en_US
dc.subject Network management systems en_US
dc.subject Fault localization en_US
dc.subject Intrusion detection systems en_US
dc.subject SCADA systems en_US
dc.title A Model-based Survey of Alerts Correlation Techniques en_US
dc.type Article en_US
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
P14 - A model-based survey of alert correlation techniques.pdf
Size:
862.29 KB
Format:
Adobe Portable Document Format
Description:
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.61 KB
Format:
Item-specific license agreed upon to submission
Description: