Christopher Krügel Thomas Toth Clemens Kerer Decentralized Event Correlation for Intrusion Detection. 114-131 2001 conf/icisc/2001 ICISC http://link.springer.de/link/service/series/0558/bibs/2288/22880114.htm db/conf/icisc/icisc2001.html#KrugelTK01