Stephen W. Neville. Necessary conditions for determining a robust time threshold in standard INFOSEC alert clustering algorithms. In Proceedings of the IEEE International Conference on Systems, Man and Cybernetics, Waikoloa, Hawaii, USA, October 10-12, 2005. pages 791-797, IEEE, 2005. [doi]
Abstract is missing.