Concepedia

Event Correlation Rules

Event Correlation Rules is a formal method in the domain of cybersecurity incident management that identifies and links related security events by applying logical or statistical criteria to distinguish meaningful patterns from isolated occurrences, thereby reducing alert overload in alert triage.

35

Publications

1.2K

Citations

98

Authors

38

Institutions

Publications per year

2017–2026

2

Parents

Publications

35

From Regulatory Policies to Event Monitoring Rules: Towards Model-Driven Compliance Automation

Christopher Giblin, Samuel Müller, Birgit Pfitzmann · 2006 · 109 citations

, , +17

Discovering actionable patterns in event data

Joseph L. Hellerstein, Shaoping Ma, Chang-Shing Perng · IBM Systems Journal · 2002 · 107 citations

, , +15

A decentralized approach for mining event correlations in distributed system monitoring

Gang Wu, Huxing Zhang, Meikang Qiu et al. · Journal of Parallel and Distributed Computing · 2012 · 107 citations

, , +16

Composite events for network event correlation

G. Liu, Aloysius K. Mok, Ellyn Yang · 2003 · 107 citations

, , +13

SEC - a lightweight event correlation tool

Risto Vaarandi · 2003 · 84 citations

, , +7

1–5 of 35

Authors

98

  1. JL
    Joseph L. Hellerstein

    IBM Research - Thomas J. Watson Research Center, United States

    2 publications · 121 citations

    2

    h-index

  2. CP
    Chang-Shing Perng

    IBM (United States), United States

    2 publications · 121 citations

    2

    h-index

  3. JP
    John P. Rouillard

    University of Massachusetts Boston, United States

    2 publications · 84 citations

    2

    h-index

  4. SM
    Shaoping Ma

    Tsinghua University, China

    2 publications · 121 citations

    2

    h-index

  5. GJ
    Gabriel Jakobson

    Southern New Hampshire University, United States

    2 publications · 55 citations

    2

    h-index

1–5 of 98

Institutions

38

  1. IBM Research - Thomas J. Watson Research Center

    Yorktown Heights, United States

    5 h-index

    14 publications

    557 citations

  2. University of Massachusetts Boston

    Boston, United States

    2 h-index

    2 publications

    84 citations

  3. IBM (United States)

    Armonk, United States

    2 h-index

    5 publications

    131 citations

  4. Tallinn University of Technology

    Tallinn, Estonia

    1 h-index

    1 publications

    84 citations

  5. University of Miami

    Coral Gables, United States

    1 h-index

    2 publications

    34 citations

  6. Nara Institute of Science and Technology

    Ikoma, Japan

    1 h-index

    2 publications

    20 citations

  7. DEVCOM Army Research Laboratory

    Adelphi, United States

    1 h-index

    1 publications

    35 citations

  8. Auburn University

    Auburn, United States

    1 h-index

    1 publications

    107 citations

1–8 of 38

Venues

  1. Journal of Network and Systems Management

    2 publications · 43 citations

    2

    h-index

  2. Software & Systems Modeling

    SoSyM · 1 publications · 39 citations

    1

    h-index

  3. Journal of Parallel and Distributed Computing

    1 publications · 107 citations

    1

    h-index

  4. Nuclear Instruments and Methods

    1 publications · 11 citations

    1

    h-index

  5. Information Security

    Conference · 1 publications · 12 citations

    1

    h-index

1–5