Guofei Gu Prahlad Fogla David Dagon Wenke Lee Boris Skoric Measuring intrusion detection capability: an information-theoretic approach. 90-101 2006 conf/ccs/2006 ASIACCS http://doi.acm.org/10.1145/1128817.1128834 db/conf/ccs/ccs2006.html#GuFDLS06