A comprehensive approach to intrusion detection alert correlation (2004)

by Fredrik Valeur, Giovanni Vigna, Christopher Kruegel, Richard A. Kemmerer
Venue:IEEE Transactions on Dependable and Secure Computing