Security Operation Center Design Based on D-S Evidence Theory

Author

Hu, Xuanzi ; Xie, Cunxi

Author_Institution

Coll. of Mech. Eng., South China Univ. of Technol., Guangzhou

fYear

2006

fDate

25-28 June 2006

Firstpage

2302

Lastpage

2306

Abstract

With the widespread application of large and complicated network, network safety has become an important issue. In this paper, a security operation center (SOC) concept based on multi-sensor data fusion technology is presented from the viewpoint of the network security. A structure of a SOC system based on D-S evidence theory is proposed, and the detailed method of data fusion in SOC is discussed. A prototype of SOC system is developed according to this structure of the SOC. Experimental results indicate that the SOC system based on D-S evidence theory can increase greatly the correctness of detection intrusion and decrease the rate of false positive

Keywords

inference mechanisms; security of data; sensor fusion; D-S evidence theory; detection intrusion; multi-sensor data fusion technology; network safety; security operation center design; Data analysis; Data security; Databases; Information security; Intelligent sensors; Intrusion detection; Sensor fusion; Sensor phenomena and characterization; Sensor systems and applications; Wireless sensor networks; D-S evidence theory; Multi-sensor data fusion; Network security; Security operation center;

fLanguage

English

Publisher

ieee

Conference_Titel

Mechatronics and Automation, Proceedings of the 2006 IEEE International Conference on

Conference_Location

Luoyang, Henan

Print_ISBN

1-4244-0465-7

Electronic_ISBN

1-4244-0466-5

Type

conf

DOI

10.1109/ICMA.2006.257690

Filename

4026457