Ulf Lindqvist Phillip A. Porras eXpert-BSM: A Host-Based Intrusion Detection Solution for Sun Solaris. 240-251 2001 conf/acsac/2001 ACSAC http://doi.ieeecomputersociety.org/10.1109/ACSAC.2001.991540 db/conf/acsac/acsac2001.html#LindqvistP01