Kohei Tatara Toshihiro Tabata Kouichi Sakurai A Probabilistic Method for Detecting Anomalous Program Behavior. 87-98 http://springerlink.metapress.com/openurl.asp?genre=article&issn=0302-9743&volume=3325&spage=87 2004 conf/wisa/2004 WISA db/conf/wisa/wisa2004.html#TataraTS04