The anomaly-based network intrusion detection systems (IDS) typically su er from high false alarm rate rendering them useless in practice as the subsequent analysis done by the network operator is costly and can be done ...