{'fraction_non_alphanumeric': 0.014583333333333334, 'fraction_numerical': 0.0, 'mean_word_length': 5.364238410596027, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Ontology-Based Inter-Domain Event Correlation

The notion of event correlation has been around for some time. Most recently, event correlation has gotten a significant amount of attention in the intrusion detection community under the topic of alert correlation. The principles behind event correlation, however, can also be used to relate events in seemingly heterogeneous domains such as access control and intrusion detection. To address the need for event data sharing between different security mechanisms, we propose the use of ontologies for inter -domain event correlation. The relevant research on alert correlation is surveyed and two taxonomies are presented to classify the approaches used in that area. Then hybridontology is proposed that can serve as the integration point for event correlation between access control and intrusion detection systems. Examples are given from an implementation to show the capabilities of the correlation process.