1. Jones AK, Sielken RS. Computer system intrusion detection: a survey. Technical report, Computer Science Department, University of Virginia; 2000.
2. EMERALD: event monitoring enabling responses to anomalous live disturbances;Porras,1997
3. DIDS (distributed intrusion detection system)—motivation, architecture, and an early prototype;Snapp,1991
4. IDES: An intelligent system for detecting intruders;Lunt,1990
5. Probabilistic plan recognition for hostile agents;Geib,2000