Magnus Almgren Hervé Debar Marc Dacier A Lightweight Tool for Detecting Web Server Attacks. 2000 conf/ndss/2000 NDSS http://www.isoc.org/isoc/conferences/ndss/2000/proceedings/007.pdf db/conf/ndss/ndss2000.html#AlmgrenDD00