Sliding Window Based Security Event Correlation

Abstract

This paper proposed a sliding window based correlation model which could conveniently and efficiently correlate events between different security systems. This model works in a best-effort way to find all relationship between events and enhance event's reliability in the time window. When the correlation is ending, the original event is either eliminated from event sequence or gotten an increased reliability.