CoreFlow: Enriching Bro security events using network traffic monitoring data
Towards a Taxonomy of Intrusion-Detection Systems