H. R. El-Taj, “Aggregating IDS Alerts Based on Time Threshold: Testing and Results”, IJCT, vol. 11, no. 2, pp. 2216–2225, Oct. 2013.