Mining intrusion detection alarms for actionable knowledge
cactus - clustering categorical data using summaries .