Wenke Lee, Salvatore J. Stolfo: A framework for constructing features and models for intrusion detection systems.
227-261
John McHugh: Testing Intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory.
262-294