... Ed Tittel mentioned one of Mr. Bejtlich's Amazon.com reading lists in this article at TechTarget.com. PaulInnella wrote a history of intrusion detection systems that mentions the Automated Security Incident Measurement (ASIM) technology...
http://www.taosecurity.com/press.html