A. Barczak, “Architecture of the common intrusion detection framework”, SI, vol. 1, no. 1, pp. 57–67, Jun. 2003.