Clustering intrusion detection alarms to support root cause analysis,” (2003)

by K Julisch
Venue:ACM Transactions on Information System Security,