©2003 (GNU) Melanie Rieback The Meta-Alert Correlation Engine is a program that manages and correlates alerts from a wide range of intrusion detection systems. Overview Two of the largest problems facing Intrusion Detection Expert today are IDS interoperability, and the presence of large numbers of false positives. The Meta-Alert Correlation Engine offers a solution to both of these problems: MACE uses the new Intrusion Detection Message Exchange Format (IDMEF) MACE uses a plugin-based preprocessing system to automate simple filtering of IDS alerts. MACE uses the CLIPS Expert System to produce a small number of "metaalerts", based upon user input, and an extensive knowledge base License The Meta-Alert Correlation Engine is licensed under the terms of the GNU General Public License, published by the Free Software Foundation. Last modified: July 3, 2003