Revised taxonomy for intrusion-detection systemsHervé DebarMarc Dacieret al.2000Annales des Telecommunications/Annals of Telecommunications
Fixed- vs. variable-length patterns for detecting suspicious process behaviorAndreas WespiHerve Debaret al.2000Journal of Computer Security