A Study in the Feasibility of Performing Host-Based Anomaly Detection on Windows NT.

Aaron Schwartzbard Anup K. Ghosh A Study in the Feasibility of Performing Host-Based Anomaly Detection on Windows NT. 1999 Recent Advances in Intrusion Detection db/conf/raid/raid1999.html#SchwartzbardG99