Stefan Axelsson Visualisation for Intrusion Detection. 309-325 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2808&spage=309 2003 conf/esorics/2003 ESORICS db/conf/esorics/esorics2003.html#Axelsson03