Frank Apap Andrew Honig Shlomo Hershkop Eleazar Eskin Salvatore J. Stolfo Detecting Malicious Software by Monitoring Anomalous Windows Registry Accesses. 36-53 2002 RAID http://link.springer.de/link/service/series/0558/bibs/2516/25160036.htm db/conf/raid/raid2002.html#ApapHHES02