5NING P,XU D.Learning attack strategies from intrusion alerts[A].Proceedings of the 10th ACM Conference on Computer and Communications Security[C].Washington,D C,USA,2003.200-209.
6QIN X,LEE W.Statistical causality analysis of INFOSEC alert data[A].Proceedings of the 6th International Symposium on Recent Advances in Intrusion Detection[C].Pittsburgh,USA,2003.73-94.
7QIN X,LEE W.Discovering novel attack strategies from INFOSEC alerts[A].Proceedings of the 9th European Symposium on Research in Computer Security[C].Sophia Antipolis,France,2004.439-456.
8MAGGI F,ZANERO S.On the use of different statistical tests for alert correlation:short paper[A].Proceedings of the 10th International Conference on Recent Advances in Intrusion Detection[C].Gold Goast,Australia,2007.167-177.
9ZHU B,GHORBANI A A.Alert correlation for extracting attack strategies[J].International Journal of Network Security,2006,3(3):244-258.
10ZHANG A,LI Z,LI D,et al.Discovering novel multistage attack patterns in alert streams[A].Proceedings of International Conference on Networking,Architecture,and Storage[C].Guilin,China,2007.115-121.
