METHOD AND SYSTEM FOR DISTINGUISHING RELEVANT NETWORK SECURITY THREATS USING COMPARISON OF REFINED INTRUSION DETECTION AUDITS AND INTELLIGENT SECURITY ANALYSIS

摘要

This invention is related to apparatus for distinguishing a threat situation , method and computer program product are provided . By a conventional computer system , from the real threat situation is that the threat situation minutes inde complex and difficult task , because the general " threat situation" difficult to express quantitatively . By using an intelligent conceptual clustering technique , this threat situation may be distinguished from non-fatal false threat situation . Thus , e-commerce , information technology system can be safely without sacrificing their effectiveness .