Feature ranking using IG on DMZ 1 DARPA 2000 dataset.

<p>Feature ranking using IG on DMZ 1 DARPA 2000 dataset.</p

All features of DRAPA 2000 datasets.

<p>All features of DRAPA 2000 datasets.</p

List of attack steps (clusters) discovered on all dataset.

<p>List of attack steps (clusters) discovered on all dataset.</p

Results of Hierarchical after feature ranking.

<p>Results of Hierarchical after feature ranking.</p

Two-Tier Feature Selection Procedure.

<p>Two-Tier Feature Selection Procedure.</p

Results of EM with varying number of clusters.

<p>Results of EM with varying number of clusters.</p

Attributes of an alert extracted from the XML document.

<p>Attributes of an alert extracted from the XML document.</p

Summary of clustering accuracy using K-means, EM and Hierarchical algorithm on all datasets after feature ranking.

<p>Summary of clustering accuracy using K-means, EM and Hierarchical algorithm on all datasets after feature ranking.</p

Performance comparison with other feature subsets.

<p>Performance comparison with other feature subsets.</p

Results of Hierarchical based on seven selected features.

<p>Results of Hierarchical based on seven selected features.</p