Automatic intrusion scenario construction by mining hyper-alert sequences: Automatic intrusion scenario construction by mining hyper-alert sequences