Learning attack strategies from intrusion alerts
Aggregation and Correlation of Intrusion-Detection Alerts