Alert Correlation for Extracting Attack Strategies
Learning attack strategies from intrusion alerts