firstly, acqumng attack patterns through interactive
knowledge discovery by introducing FP-Tree algorithm [12]
and WINEPI algorithm [13]; secondly, transforming the
discovered frequent patterns and sequential patterns to the
correlation rules of alert events; finally, implementing the
dynamically generation of network security situation graph
based upon the network security situation generation
algorithm.