Alert Correlation Analysis in Intrusion Detection

2006 ◽  
pp. 1049-1056 ◽  
Author(s):  
Moon Sun Shin ◽  
Kyeong Ja Jeong
Keyword(s):  
Intrusion Detection ◽  
Correlation Analysis ◽  
Alert Correlation

Intrusion Detection of Cyber-Physical Attacks in Manufacturing Systems: A Review

2019 ◽  
Author(s):  
Mingtao Wu ◽  
Young B. Moon
Keyword(s):  
Intrusion Detection ◽  
Manufacturing Systems ◽  
High Volume ◽  
Cyber Attacks ◽  
Intrusion Detection Systems ◽  
Detection Methods ◽  
False Alarms ◽  
Alert Correlation ◽  
Acoustic Image ◽  
Detection Systems

Abstract Cyber-physical manufacturing system is the vision of future manufacturing systems where physical components are fully integrated through various networks and the Internet. The integration enables the access to computation resources that can improve efficiency, sustainability and cost-effectiveness. However, its openness and connectivity also enlarge the attack surface for cyber-attacks and cyber-physical attacks. A critical challenge in defending those attacks is that current intrusion detection methods cannot timely detect cyber-physical attacks. Studies showed that the physical detection provides a higher accuracy and a shorter respond time compared to network-based or host-based intrusion detection systems. Moreover, alert correlation and management methods help reducing the number of alerts and identifying the root cause of the attack. In this paper, the intrusion detection research relevant to cyber-physical manufacturing security is reviewed. The physical detection methods — using side-channel data, including acoustic, image, acceleration, and power consumption data to disclose attacks during the manufacturing process — are analyzed. Finally, the alert correlation methods — that manage the high volume of alerts generated from intrusion detection systems via logical relationships to reduce the data redundancy and false alarms — are reviewed. The study show that the cyber-physical attacks are existing and rising concerns in industry. Also, the increasing efforts in cyber-physical intrusion detection and correlation research can be utilized to secure the future manufacturing systems.

scholarly journals An Intrusion Action-Based IDS Alert Correlation Analysis and Prediction Framework

IEEE Access ◽  
2019 ◽  
Vol 7 ◽  
pp. 150540-150551 ◽  
Author(s):  
Kai Zhang ◽  
Fei Zhao ◽  
Shoushan Luo ◽  
Yang Xin ◽  
Hongliang Zhu
Keyword(s):  
Correlation Analysis ◽  
Alert Correlation
Sign in / Sign up

Export Citation Format

Share Document