Process mining and hierarchical clustering to help intrusion alert visualization.
Sean Carlisto de AlvarengaSylvio BarbonRodrigo Sanches MianiMichel CukierBruno Bogaz ZarpelãoPublished in: Comput. Secur. (2018)
Keyphrases
- hierarchical clustering
- process mining
- process model
- alert correlation
- event logs
- business process
- clustering method
- business processes
- intrusion detection
- clinical pathway
- incremental clustering
- clustering algorithm
- formal concept analysis
- intrusion detection system
- single link
- single linkage
- hierarchical clustering algorithm
- model based clustering
- anomaly detection
- network security
- data analysis
- partitional clustering
- information retrieval