Learning from the past: automated rule generation for complex event processing
Learning rules for anomaly detection of hostile network traffic