Add to ORKGThe notion of event correlation has been around for some time. Most recently, event correlation has gotten a significant amount of attention in the intrusion detection community under the topic of alert correlation. The principles behind event correlation, however, can also be used to relate events in seemingly heterogeneous domains such as access control and intrusion detection. To address the need for event data sharing between different security mechanisms, we propose the use of ontologies for inter-domain event correlation. The relevant research on alert correlation is surveyed and two taxonomies are presented to classify the approaches used in that area. Then hybrid ontology is proposed that can serve as the integration point for event...