Dingbang Xu Peng Ning Alert Correlation through Triggering Events and Common Resources. 360-369 2004 conf/acsac/2004 ACSAC http://doi.ieeecomputersociety.org/10.1109/CSAC.2004.5 db/conf/acsac/acsac2004.html#XuN04