Skip to main content

Table 2 Parameters of Morwilog

From: OMMA: open architecture for Operator-guided Monitoring of Multi-step Attacks

Name

Description

Simulation

T max

Maximum search time

62 s

τ[0]

Initial number of pheromones

1000

ρ

Evaporation rate

0.02

w

Spreading of Δτ+,− function

1000

\(\Delta \tau ^{+}_{0}\)

Change of pheromones when τ[n] = τ[0]

500

τ min

Minimum level of pheromones

100

\(\tau ^{atk}_{min}\)

Minimum level of ph. for attack

200

P tree

Prob. of creating a new tree if no match

0.5

P jump

Prob. of adding a random sequence

0.1