EMERALD: Event Monitoring Enableing Responses to Anomalous Live Disturbances (1997)

by P Porras, P Neumann
Venue:in National Information Systems Security Conference