Correlating Intrusion Events and Building Attack Scenarios Through Attack Graph Distances