Platform independent event correlation tool for network management. - Risto Vaarandi (NOMS, 2002)

Platform Independent Tool for Local Event Correlation. - Risto Vaarandi (Acta Cybern., 2002)

A Clustering Algorithm for Logfile Data Sets. - Risto Vaarandi (SPLST, 2003)

A Breadth-First Algorithm for Mining Frequent Patterns from Event Logs. - Risto Vaarandi (INTELLCOMM, 2004)

Mining event logs with SLCT and LogHound. - Risto Vaarandi (NOMS, 2008)

Network IDS alert classification with frequent itemset mining and data clustering. - Risto Vaarandi; Karlis Podins (CNSM, 2010)

Detecting anomalous network traffic in organizational private networks. - Risto Vaarandi (CogSIMA, 2013)

Using Security Logs for Collecting and Reporting Technical Security Metrics. - Risto Vaarandi; Mauno Pihelgas (MILCOM, 2014)

LogCluster - A data clustering and pattern mining algorithm for event logs. - Risto Vaarandi; Mauno Pihelgas (CNSM, 2015)

Simple event correlator - Best practices for creating scalable configurations. - Risto Vaarandi; Bernhards Blumbergs; Emin Çaliskan (CogSIMA, 2015)

Event log analysis with the LogCluster tool. - Risto Vaarandi; Markus Kont; Mauno Pihelgas (MILCOM, 2016)

Creating and Detecting IPv6 Transition Mechanism-Based Information Exfiltration Covert Channels. - Bernhards Blumbergs; Mauno Pihelgas; Markus Kont; Olaf Maennel; Risto Vaarandi (NordSec, 2016)

Efficient Event Log Mining with LogClusterC. - Chen Zhuge; Risto Vaarandi (BigDataSecurity/HPSC/IDS, 2017)

Bbuzz: A bit-aware fuzzing framework for network protocol systematic reverse engineering and analysis. - Bernhards Blumbergs; Risto Vaarandi (MILCOM, 2017)

An unsupervised framework for detecting anomalous messages from syslog log files. - Risto Vaarandi; Bernhards Blumbergs; Markus Kont (NOMS, 2018)

A Stream Clustering Algorithm for Classifying Network IDS Alerts. - Risto Vaarandi (CSR, 2021)

How to Build a SOC on a Budget. - Risto Vaarandi; Sten Mäses (CSR, 2022)

Comparative Analysis of Pattern Mining Algorithms for Event Logs. - Orkhan Gasimov; Risto Vaarandi; Mauno Pihelgas (CSR, 2023)

Learning From Few Cyber-Attacks: Addressing the Class Imbalance Problem in Machine Learning-Based Intrusion Detection in Software-Defined Networking. - Seyed Mohammad Hadi Mirsadeghi; Hayretdin Bahsi; Risto Vaarandi; Wissem Inoubli (IEEE Access, 2023)

Hybrid Cybersecurity Research and Education Environment for Maritime Sector. - Gabor Visky; Aleksei Siganov; Muaan ur Rehman; Risto Vaarandi; Hayretdin Bahsi; Leonidas Tsiopoulos (CSR, 2024)

Open Source Intrusion Detection Systems' Performance Analysis Under Resource Constraints. - Gabor Visky; Adam Balint; Risto Vaarandi; Mauno Pihelgas; Olaf Maennel (SISY, 2024)

Stream clustering guided supervised learning for classifying NIDS alerts. - Risto Vaarandi; Alejandro Guerra-Manzanares (Future Gener. Comput. Syst., 2024)

Network IDS alert classification with active learning techniques. - Risto Vaarandi; Alejandro Guerra-Manzanares (J. Inf. Secur. Appl., 2024)

Evaluating Explainable AI for Deep Learning-Based Network Intrusion Detection System Alert Classification. - Rajesh Kalakoti; Risto Vaarandi; Hayretdin Bahsi; Sven Nõmm (ICISSP (1), 2025)

A Systematic Literature Review of Cyber Security Monitoring in Maritime. - Risto Vaarandi; Leonidas Tsiopoulos; Gabor Visky; Muaan ur Rehman; Hayretdin Bahsi (IEEE Access, 2025)

Literature Review: Cyber Security Monitoring in Maritime. - Risto Vaarandi; Leonidas Tsiopoulos; Gabor Visky; Muaan ur Rehman; Hayretdin Bahsi (CoRR, 2025)

Using large language models for template detection from security event logs. - Risto Vaarandi; Hayretdin Bahsi (Int. J. Inf. Sec., 2025)