Xinzhou Qin Wenke Lee Statistical Causality Analysis of INFOSEC Alert Data. 73-93 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2820&spage=73 2003 conf/raid/2003 RAID db/conf/raid/raid2003.html#QinL03