1. A systematic literature review of methods and datasets for anomaly-based network intrusion detection
2. A survey of network anomaly detection techniques
3. Chimera: A declarative language for streaming network traffic analysis;Borders,2012
4. Nazca: detecting malware distribution in large-scale networks;Invernizzi,2014
5. M. Roesch, “Lightweight intrusion detection for networks,” in LISA’99: Proceedings of the 13th USENIX conference on System administration, Nov., 1999, pp.229–238.