In this paper,a new policy based on attack scenario is proposed from the view of alert data aggregation analysis. The prediction algorithm is given in detail and is implemented based on Linux platform in C programming language.

• 从警报数据聚合处理的角度,提出了基于攻击过程的预警策略,并在详细介绍该算法的基础上,基于Linux系统,用C语言实现了该算法。