Abstract: The architecture and functions of Intrusion Detection Alert Management ＆ Intrusion Response System （IDAM＆IRS） are briefly introduced in this paper. The problems caused by repetitive IDS alerts are presented. Based on a detail discussion of alert aggregati

Key words: Alert aggregation, Alert processing, Intrusion detection, Intrusion response