Correlation engines are autonomic computing systems that perform the automated, continuous analysis of enterprise-wide event data based on user-defined, configurable rules in order to detect threats and protect a system from them. In this paper, we discuss the run-time advantages of using ontologies as a conceptual backbone for describing knowledge processed by correlation engines.
['Ljiljana Stojanovic', 'Andreas Abecker', 'Nenad Stojanovic', 'Rudi Studer']
Ontology-based correlation engines