Aggregation and Correlation of Intrusion-Detection Alerts
A revised taxonomy for intrusion-detection systems