Alert Correlation for Extracting Attack Strategies
Constructing attack scenarios through correlation of intrusion alerts