Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Purpose – The purpose of this paper is to show how to ensure a real‐time precise aggregation processing of network security events without difficultly determined parameters.Design/methodology/approach – The aggregation method includes the choice of aggregation granularity, consistency of abstraction layer, the expression of all hyper security events (HSEs) of a node in cache, and aggregation algorithm based on classification, etc.Findings – The aggregation method is capable to provide a real‐time way for good HSEs for next correlation processing with ak and easy parameters to determine.Research limitations/implications – The cost of space is not discussed in the method.Practical implications – The aggregation method is suitable for real‐time management of difficult issues to resolve massive security events.Originality/value – Many ideas and concepts of the paper are proposed for the first time, such as the expression of all HSEs of a node in cache, ak queue length instead of the ak‐time window and s...
['Zhitang Li', 'Yang-Ming Ma', 'Li Wang', 'Jie Lei', 'Jie Ma']
I am writing a research paper on a idea A novel real‐time aggregation method on network security events
[{"from": "human", "value": "I am writing a research paper on a idea A novel real\u2010time aggregation method on network security events"}, {"from": "gpt", "value": "Thats a unique idea.You should consider the following idea to enhance your idea so that it would impact uniquely: Purpose \u2013 The purpose of this paper is to show how to ensure a real\u2010time precise aggregation processing of network security events without difficultly determined parameters.Design/methodology/approach \u2013 The aggregation method includes the choice of aggregation granularity, consistency of abstraction layer, the expression of all hyper security events (HSEs) of a node in cache, and aggregation algorithm based on classification, etc.Findings \u2013 The aggregation method is capable to provide a real\u2010time way for good HSEs for next correlation processing with ak and easy parameters to determine.Research limitations/implications \u2013 The cost of space is not discussed in the method.Practical implications \u2013 The aggregation method is suitable for real\u2010time management of difficult issues to resolve massive security events.Originality/value \u2013 Many ideas and concepts of the paper are proposed for the first time, such as the expression of all HSEs of a node in cache, ak queue length instead of the ak\u2010time window and s..."}]