VisFlowConnect: netflow visualizations of link relationships for security situational awareness
ADAM: Detecting Intrusions by Data Mining