TRINETR: An architecture for collaborative intrusion detection and knowledge-based alert evaluation

EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances

Phillip Porras, Peter G. Neumann, Ravenswood Avenue · 2002 · 710 citations

Computing, Cybersecurity, Systems Engineering +17

Alert correlation in a cooperative intrusion detection framework

Frédéric Cuppens, Alexandre Miège · 2005 · 689 citations

Computing, Computer Science, Cybersecurity +13

Intrusion detection using autonomous agents

Eugene H. Spafford, Diego Zamboni · Computer Networks · 2000 · 350 citations

Computing, Autonomous Systems, Computer Science +14

Managing alerts in a multi-intrusion detection environment

Frédéric Cuppens · 2005 · 251 citations

Computing, Computer Science, Cybersecurity +10

Lightweight agents for intrusion detection

Guy Helmer, Johnny S. Wong, Vasant Honavar et al. · Journal of Systems and Software · 2003 · 143 citations

Computing, Computer Engineering, Computer Science +14