A of automatically classifying alerts issued by intrusion detection sensors (11a, 11b, 11c) of an information security system (1) for producing collated alerts, each alert being defined by a plurality of qualitative attributes (a1, . . . , an) belonging to a plurality of attribute domains (A1, . . ....http://www.google.de/patents/US20070118905?utm_source=gb-gplus-sharePatent US20070118905 - Method of automatically classifying a set of alarms emitted by sensors for detecting intrusions of an information security system
