Information Technology Reference
In-Depth Information
Fig. 6.
State machine-based specification of the
NetworkLevelF
service
the list of all events, both primary and secondary, is formed (in the state
RecalcList-
Creation
). Then, for each event stored in the aforementioned list, computation and
updating of the features with the subsequent call of the service
SpamState
is carried
out. This is done in the state
RecalcList
. In turn, the service
SpamState
performs for-
warding the
computed feature values to the source-based classifiers associated with
the respective events in the above mentioned list.
4.2.2 Alert Correlation Agent Classes
In general, the agent classes mentioned in the subsection title are the same; they only
differ (1) in their rule bases used for alert correlation, (2) in the lists of the source-
based classifiers forming their inputs and also (3) in the lists of the receivers of the
Fig. 7.
Services of the agent classes responsible for meta-classification
