Jouni Viinikka Hervé Debar Monitoring IDS Background Noise Using EWMA Control Charts and Alert Information. 166-187 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=3224&spage=166 2004 conf/raid/2004 RAID db/conf/raid/raid2004.html#ViinikkaD04