Adaptive alert throttling for intrusion detection systems

摘要: Each time that an intrusion detection system raises alert it must make some attempt to communicate the information operator. This communication channel can easily become target of a denial service attack because, like all channels, has fixed capacity. If this overwhelmed with bogus data, attacker quickly achieve complete neutralisation capability. Although these types are very hard stop completely, our aim is present techniques improve throughput and capacity such extent resources required successfully mount prohibitive.