Peng Ning Yun Cui Douglas S. Reeves Analyzing Intensive Intrusion Alerts via Correlation. 74-94 2002 RAID http://link.springer.de/link/service/series/0558/bibs/2516/25160074.htm db/conf/raid/raid2002.html#NingCR02