I am currently involved in a project were we are developing an intrusion detection and active response system using a statistical anomaly detection and clustering algorithm, and an intrusion consequence analyzer for triggering responses.

I have a more detailed home page here

home page