Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: An Effective Attack Scenario Construction Model based on Attack Steps
  and Stages Identification   A Network Intrusion Detection System (NIDS) is a network security technology
for detecting intruder attacks. However, it produces a great amount of
low-level alerts which makes the analysis difficult, especially to construct
the attack scenarios. Attack scenario construction (ASC) via Alert Correlation
(AC) is important to reveal the strategy of attack in terms of steps and stages
that need to be launched to make the attack successful. In most of the existing
works, alerts are correlated by classifying the alerts based on the
cause-effect relationship. However, the drawback of these works is the
identification of false and incomplete correlations due to the infiltration of
raw alerts. To address this problem, this work proposes an effective ASC model
to discover the complete relationship among alerts. The model is successfully
experimented using two types of datasets, which are DARPA 2000, and ISCX2012.
The Completeness and Soundness of the proposed model are measured to evaluate
the overall correlation effectiveness.

35
The categories of this paper are: mtrl-th
37
The categories of this paper are: supr-con
20
The categories of this paper are: acc-phys
36
The categories of this paper are: cmp-lg
22
The categories of this paper are: chao-dyn
2
The categories of this paper are: math
12
The categories of this paper are: nucl-th
13
The categories of this paper are: quant-ph
4
The categories of this paper are: cond-mat
23
The categories of this paper are: solv-int
34
The categories of this paper are: chem-ph
24
The categories of this paper are: dg-ga
33
The categories of this paper are: plasm-ph
3
The categories of this paper are: physics
25
The categories of this paper are: patt-sol
27
The categories of this paper are: comp-gas