False positive elimination in intrusion detection based on clustering
managing alerts in a multi - intrusion detection environmen .