a model - based survey of alert correlation techniques .
Aggregation and Correlation of Intrusion-Detection Alerts