8ENDSLEY M R. Design and evaluation for situation awareness enhancement [C]// Proceeding of the 32nd Human Factors Society Annual Meeting. Santa Monica: Human Factors and Ergonomics Society, 1988:97 - 101.
9PORRAS P A, FONG M W, VALDES A. A mission-impact-based approach to INFOSEC alarm correlation [ C]//Proceedings of the 5th International Symposium on Recent Advances in Intrusion Detection. Berlin: Springer-Verlag, 2002:95 - 114.
10MORIN B, ME L, DEBAR H, et al. M2D2: A formal data model for IDS alert correlation [ C ]// Proceedings of the International Symposium on Recent Advances in Intrusion Detection. Berlin: Springer-Verlag, 2002:115 - 137.