1. Snort. Snort, 2014. (retrieved February 2014).
2. Wenke Lee, Salvatore J. Stolfo, Kui W. Mok, A data mining framework for building intrusion detection models, in: IEEE S&P, 1999, pp. 120–132.
3. Shobha Venkataraman, David Brumley, Subhabrata Sen, Oliver Spatscheck, Automatically inferring the evolution of malicious activity on the internet, in: NDSS, 2013.
4. Stephanie Forrest, Steven A. Hofmeyr, Anil Somayaji, Thomas A. Longstaff, A sense of self for unix processes, in: IEEE S&P, 1996, pp. 120–128.
5. Profiling program behavior for anomaly intrusion detection based on the transition and frequency property of computer audit data;Wang;Comput. Secur.,2006