Kwong H. Yung Detecting Long Connection Chains of Interactive Terminal Sessions. 1-16 2002 RAID http://link.springer.de/link/service/series/0558/bibs/2516/25160001.htm db/conf/raid/raid2002.html#Yung02