Research on network events correlation based on topological dependence and sliding window

杨家海,王继龙,吴建平
DOI: https://doi.org/10.3969/j.issn.1000-7180.2004.08.013
2004-01-01
Abstract:The paper proposes an events correlation model and algorithm based on topological dependence and sliding time window. Where the sliding time window i s used to correlate events in time domain, and the topological dependence inform ation extracted from network topology discovery is used to correlate events in s pace domain. This approach can dynamically adapt to the change of network struct ure, shorten time cycle of rule learning. As the relatively complex computation of topological dependence is finished prior to the online event correlation, the complexity of the algorithm is reduced from O(M2) to O(M×N).
What problem does this paper attempt to address?