Benjamin Morin Ludovic Mé Hervé Debar Mireille Ducassé M2D2: A Formal Data Model for IDS Alert Correlation. 115-127 2002 RAID http://link.springer.de/link/service/series/0558/bibs/2516/25160115.htm db/conf/raid/raid2002.html#MorinMDD02