Effective prioritization of network intrusion alerts to enhance situational awareness

Abstract

Maintaining situational awareness in dynamic and complex systems, such as information and communications networks, is essential to protecting assets and increasing mission assurance. Network monitoring tools generate tremendous amounts of data, overwhelming network defenders with alerts.