NIST · ИТ · 306aeb3bb6472d708398
Reducing the Cognitive Load on Analysts Through Hamming Distance Based Alert Aggregation
Previous work introduced the idea of grouping alerts at a Hamming distance of 1 to achieve alert aggregation; such aggregated meta-alerts were shown to increase alert interpret-ability. However, a mean of 84,023 daily Snort alerts were reduced to a still
NIST · ИТОфициальный источник · 2014-09-30
{
"title_en": "Reducing the Cognitive Load on Analysts Through Hamming Distance Based Alert Aggregation",
"designation": "",
"series": "",
"status": "",
"date": "2014-09-30",
"date_original": "September 30, 2014",
"url": "https://www.nist.gov/publications/reducing-cognitive-load-analysts-through-hamming-distance-based-alert-aggregation",
"source": "NIST Publications",
"display_en": "",
"authors_en": "Peter M. Mell , Richard Harang",
"abstract_excerpt_en": "Previous work introduced the idea of grouping alerts at a Hamming distance of 1 to achieve alert aggregation; such aggregated meta-alerts were shown to increase alert interpret-ability. However, a mean of 84,023 daily Snort alerts were reduced to a still",
"id": "306aeb3bb6472d708398",
"sources": [
"NIST Publications"
],
"source_records": [
{
"title_en": "Reducing the Cognitive Load on Analysts Through Hamming Distance Based Alert Aggregation",
"designation": "",
"series": "",
"status": "",
"date": "2014-09-30",
"date_original": "September 30, 2014",
"url": "https://www.nist.gov/publications/reducing-cognitive-load-analysts-through-hamming-distance-based-alert-aggregation",
"source": "NIST Publications",
"display_en": "",
"authors_en": "Peter M. Mell , Richard Harang",
"abstract_excerpt_en": "Previous work introduced the idea of grouping alerts at a Hamming distance of 1 to achieve alert aggregation; such aggregated meta-alerts were shown to increase alert interpret-ability. However, a mean of 84,023 daily Snort alerts were reduced to a still"
}
],
"translation_state": "none",
"possible_title_matches": 1
}