A method of analyzing computer intrusion detection information that looks beyond known attacks and abnormal access patterns to the critical information that an intruder may want to access. Unique target identifiers and type of work performed by the networked targets is added to audit log records. Analysis...http://www.google.de/patents/US20060265748?utm_source=gb-gplus-sharePatent US20060265748 - Method for detecting sophisticated cyber attacks
