Alert Correlation through Triggering Events and Common Resources
Clustering intrusion detection alarms to support root cause analysis