Option C is just too generic. Security events can be anything, but EPS is specifically about the rate of correlated events. D is the way to go, no doubt.
I'm going with D. It's the classic EPS formula we learned in security class. The number of correlated events divided by the time elapsed is the way to go.
Haha, option A is clearly a joke! Correlated events have nothing to do with EPS, that's more like a formula for measuring the correlation coefficient. Get it together, people!
Option B seems more logical to me. Normalized events are the ones that have been processed and filtered, so they should be the basis for calculating EPS.
I think option D is the correct answer. The EPS (Events Per Second) measures the number of correlated events processed per second, which is the most relevant metric for security event analysis.
Annette
18 days agoLashanda
21 days agoShayne
30 days agoSharika
13 days agoSunny
1 months agoRossana
22 days agoMeghan
27 days agoAndrew
1 months agoOdette
1 months agoTien
1 months agoLuis
2 months ago