alert classification to reduce false positives in intrusion detection .
Fast Effective Rule Induction