Tadeusz Pietraszek: Using Adaptive Alert Classification to Reduce False Positives in Intrusion Detection. RAID 2004: 102-124