Abstract
Alert correlation is an essential advance to improve the prediction and detection of cyberattacks. With the development of several intrusion detection systems, the alerts generated often present distinct formats, different acquisition times, and a high volume of data, which makes correlation a challenge. However, integrating these sources can enrich the information base, enabling a more a…