EMERALD: Event Monitoring Enabled Responses to Anomalous Live Disturbances, (1997)

by P Porras, P Neumann
Venue:National Information Systems Security Conference,