A framework and prototype for a distributed intrusion detection system (1998)

by E Spafford, D Zamboni