Hervé Debar Andreas Wespi Aggregation and Correlation of Intrusion-Detection Alerts. 85-103 2001 conf/raid/2001 Recent Advances in Intrusion Detection http://link.springer.de/link/service/series/0558/bibs/2212/22120085.htm db/conf/raid/raid2001.html#DebarW01