Network event correlation and semantic reasoning for federated networks protection system

Abstract

In this paper we present semantic approach to network event correlation for large-scale federated intrusion detection system. The major contributions of this paper are: network event correlation mechanism and semantic reasoning based on the ontology. Our propositions and deployments are used in Federated Networks Protection System as a part of the Decision Module. © 2011 Springer-Verlag.