A form of alarm clustering that is based on frequency, similarity in attack signature, similarity in attack target, or other similarities.