Abstract: Security alerts are critical for threat analysis, but the surge in network traffic and evolving web attacks have resulted in overwhelming alert volumes, causing severe alert fatigue.