DETECTION ACCURACY TUNING FOR SECURITY

申请公布号：

US2010083375(A1)

申请号：

US20080238448

申请日期：

2008.09.26

申请公布日期：

2010.04.01

申请人：

MICROSOFT CORPORATION

发明人：

FRIEDMAN ARIE;RUBIN SHAI AHARON;ARZI LIOR;KARIDI RON J.

分类号：

G06F21/00;G06F17/30

主分类号：

G06F21/00

摘要：

Aspects of the subject matter described herein relate to tuning detection components of a security system. In aspects, a history of alerts is collected. This history is then used together with knowledge about tunable objects of the system to determine parameters of the tunable objects that can be changed to improve detection of the system. Parameters of tunable objects are adjusted in a simulator that determines an effect on alerts in the history based on the adjusted parameters. A recommendation of one or more tuning actions may be provided together with information regarding the effect of each tuning action.