Attacker behavior analysis in multi-stage attack detection system
Using attack graphs for correlating, hypothesizing, and predicting intrusion alerts