An intrusion detection model (1987)

by D E Denning
Venue:IEEE Transactions on Software Engineering