F. Valeur, G. Vigna, Ch. Krügel, R. Kemmerer:
"A Comprehensive Approach to Intrusion Detection Alert Correlation";
IEEE Transactions on Dependable and Secure Computing, 1 (2004), 3; 146 - 169.
http://aleph.ub.tuwien.ac.at/F?base=tuw01&func=find-c&ccl_term=AC04968557