A study on abnormal event correlation analysis for convergence security monitor