Data Normalization Models in the Security Event Management Systems

Abstract

The problems of data transformation in the security event management systems of robotic complexes and their negative influence on the development of correlation methods in such complexes are considered. The article offers the methodical support for building correlation rules and a modified model of the incident life cycle, taking into account the sources of events.