Stefan Asanger, Andrew Hutchison: Experiences and Challenges in Enhancing Security Information and Event Management Capability Using Unsupervised Anomaly Detection. ARES 2013: 654-661