The proposal had IDS alerts as the center,and realized alert analysis by means of two-step correlation including alert evaluation and alert correlation.

• 其思路是以IDS报警为中心,将报警分析过程分解为包含报警评估与报警相关的两级关联分析模式。