Hybrid Cube: An Architecture for Analysis of Network Security Events Data Stream

Managing the network security events data stream, which is very large and real-time, and mining useful information from the data stream to analyse and forecast security situation, are very difficult. In this paper, we present an architecture, hybrid data stream cube, and its incremental updating algorithm. Experimental results proved that this architecture could facilitate on-line, multi-dimension, multi-level analysis of network security events data stream and shorten the response time.