A method, computer program product, and apparatus for presenting data about security-related events that puts the data into a concise form is disclosed. Events are abstracted into a set data-type. Sets with common elements are grouped together, and summaries of the groups"situations"are presented to...http://www.google.ca/patents/US20030041264?utm_source=gb-gplus-sharePatent US20030041264 - Presentation of correlated events as situation classes
