Ю. Я. Самохвалов and С. В. Толюпа, “Events correlation in the SIEM-systems based on unmonotonous output”, Zahist ìnf., vol. 19, no. 1, pp. 5–9, Mar. 2017.