Measuring Inconsistency in a Network Intrusion Detection Rule Set Based on Snort
Discovery of policy anomalies in distributed firewalls