Modeling network intrusion detection alerts for correlation
Correlation in an Intrusion Detection Process