Simplifying correlation rule creation for effective systems monitoring

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3278, Issue , 2004, Pages 266-268

  Araujo, C ^a   Biazetti, A ^a   Bussani, A ^b   Dinger, J ^a   Feridun, M ^b   Tanner, A ^b  

^a IBM   (United States)

^b IBM RESEARCH ZURICH   (Switzerland)

Author keywords

[No Author keywords available]

Indexed keywords

ARTIFICIAL INTELLIGENCE; COMPUTER SCIENCE; COMPUTERS;

CORRELATION RULE; EFFECTIVE SYSTEMS; EVENT CORRELATION; SYSTEMS MANAGEMENT; TOOL DEVELOPMENT; TOOLS AND TECHNIQUES;

OPERATING COSTS;

EID: 35048875337     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-30184-4_25     Document Type: Article

References (3)

1. IBM Tivoli Event Console, http://www.ibm.com/software/tivoli/products/ enterprise-console/.
2. J. L. Hellerstein, S. Ma and C. Perng, "Discovering actionable patterns from event data", IBM Systems Journal, vol. 41, issue 3, pp. 475-493, 2002.
3. K. Misch, "Clustering Intrusion Detection Alarms to Support Root Cause Analysis", ACM Transactions on Information and System Security, 6(4): 1-29, 2003