Over the last five years there has been an increase in the frequency and diversity of network
attacks. This holds true, as more and more organizations admit compromises on a daily …

Since the beginning of the Internet, cyberattacks have threatened users and organisations.
They have become more complex concurrently with computer networks. Nowadays …

Alert correlation is a process that analyzes the alerts produced by one or more intrusion
detection systems and provides a more succinct and high-level view of occurring or …

Correlating and analyzing security alerts is a critical and challenging task in security
management. Recently, some techniques have been proposed for security alert correlation …

As telecommunication networks evolve rapidly in terms of scalability, complexity, and
heterogeneity, the efficiency of fault localization procedures and the accuracy in the …

As complete prevention of computer attacks is not possible, intrusion detection systems
(IDSs) play a very important role in minimizing the damage caused by different computer …

Monitoring unused or dark IP addresses offers opportunities to significantly improve and
expand knowledge of abuse activity without many of the problems associated with typical …

In this paper, a new approach for detecting previously unencountered malware targeting
mobile device is proposed. In the proposed approach, time-stamped security data is …

Several alert correlation methods were proposed in the past several years to construct high-
level attack scenarios from low-level intrusion alerts reported by intrusion detection systems …

Managing raw alerts generated by various sensors are becoming of more significance to
intrusion detection systems as more sensors with different capabilities are distributed …