Answers are grounded in this paper and cite their sources.
Alert correlation plays an increasingly crucial role in nowadays computer security infrastructures. It is particularly needed for coping with the huge amounts of alerts which are daily triggered by intrusion detection systems (IDSs), fire-walls, etc.
No takes yet. Share an insight, caveat, or question.
Tabia et al. (2011) studied this question.
Synapse has enriched 5 related papers. Consider them for comparative context: