Using attack graphs for correlating, hypothesizing, and predicting intrusion alerts
Correlating intrusion events and building attack scenarios through attack graph distances