abstract |
A method and system for enabling detection of concerted intrusion efforts by collecting data from various local sensors resident in intrusion detection system log files, firewalls, and routers across multiple network sites and normalizing, correlating and processing ('integrating') the sensor data from multiple different sensors resident on the multiple network sites. |