Krzysztof M. Brzezinski Intrusion Detection as Passive Testing: Linguistic Support with TTCN-3 (Extended Abstract). 79-88 2007 conf/dimva/2007 DIMVA http://dx.doi.org/10.1007/978-3-540-73614-1_5 db/conf/dimva/dimva2007.html#Brzezinski07