A Model Towards Using Evidence from Security Events for Network Attack Analysis
Aggregation and Correlation of Intrusion-Detection Alerts