EMERALD: Eventmonitoring enabling responses to anomalous live disturbances (1997)

by P Porras, P G Neumann
Venue:In Proceedings National InformationSystems Security Conference