Lambert Schaelicke Thomas Slabach Branden J. Moore Curt Freeland Characterizing the Performance of Network Intrusion Detection Sensors. 155-172 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=2820&spage=155 2003 conf/raid/2003 RAID db/conf/raid/raid2003.html#SchaelickeSMF03