NetSTAT: a network-based intrusion detection approach
dids ( distributed intrusion detection system ) — motivation , architecture , and an early prototype .