An intrusion-detection model (1987)

by D E Denning
Venue:Software Engineering, IEEE Transactions on