The common intrusion detection framework architecture. http://seclab.cs.ucdavis.edu/cidf/draft.txt (1998)

by P Porras, D Schnackenberg, S StanifordChen, M Stillman, F Wu