1. An intrusion–detection model;Denning;IEEE Transactions on Software Engineering,1987
2. M. Roesch, Snort––lightweight intrusion detection for networks, in: Proceedings of USENIX LISA 99, USENIX Association, Berkeley, 1999, pp. 229–238. Also available online at
3. V. Paxson, Bro: a system for detecting network intruders in real-time, in: Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, USENIX Association, Berkeley, 1998, pp. 31–51
4. NetSTAT: a network-based intrusion detection system;Vigna;Journal of Computer Security,1999
5. J. Allen, A. Christie, W. Fithen, J. McHugh, J. Pickel, E. Stoner, State of the practice of intrusion detection technologies, Technical Report CMU/SEI-99-TR-028, Software Engineering Institute, Carnegie Mellon, January 2000