EFM: Enhancing the performance of signature-based network intrusion detection systems using enhanced filter mechanism
A framework for constructing features and models for intrusion detection systems