Moon Sun Shin Kyeong Ja Jeong Alert Correlation Analysis in Intrusion Detection. 1049-1056 2006 conf/adma/2006 ADMA http://dx.doi.org/10.1007/11811305_114 db/conf/adma/adma2006.html#ShinJ06