An Achilles' Heel in Signature-Based IDS: Squealing False Positives in SNORT
Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation