Dr. Emlyn Everitt

His PhD thesis outlines an expert system for “Inferential Analysis of Incomplete Audit Data Sets” or, more plainly, regenerating intrusion prevention system data logs that have been compromised by a hacker trying to hide a security compromise.