Three Layers Approach for Network Scanning Detection
An experimental evaluation to determine if port scans are precursors to an attack