{'fraction_non_alphanumeric': 0.01002865329512894, 'fraction_numerical': 0.0028653295128939827, 'mean_word_length': 5.99, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Report Technical 71 Advanced Event Correlation in Security Information and Event Management Systems

In this report, several open problems in current enterprise Security Information and Event Management systems, specifically with respect to their event correlation are discussed. An advanced event correlation using a special kind of soft pattern matching in conjunction with ontological background knowledge, Description Logic inference and a probabilistic post processing by Conditional Random Fields is proposed to address these problems. It is shown that this approach improves the detection accuracy by detecting even unknown incidents in contrast to currently applied rule-based correlations.