Eugene H. Spafford Diego Zamboni New directions for the AAFID architecture. 1999 Recent Advances in Intrusion Detection http://www.raid-symposium.org/raid99/PAPERS/Zamboni.pdf db/conf/raid/raid1999.html#SpaffordZ99