Abstract: One of the primary issues of IDSes is excessive false positives. This adds heavy burden to the system manager, which may lead the essential attacks to be ignored, and lead the automated intrusion response, e.g. cooperating with firewalls, can＇t carry out

Key words: Intrusion detection, Alerts management, Game theory