http://infosecnirvana.com/tag/siem-rule-types/
http://www.tripwire.com/state-of-security/security-data-protection/security-information-event-management-actionable-events/
http://www.buzzcircuit.com/guessing-game-planning-sizing-siem-based-on-eps/
http://www.ithome.com.tw/node/77205
注册了一个网站,挺有意思:
http://bi.dataguru.cn/
原文:http://www.cnblogs.com/diyunpeng/p/3585309.html