Hervé Debar Marc Dacier Andreas Wespi Towards a taxonomy of intrusion-detection systems. 805-822 1999 31 Computer Networks 8 db/journals/cn/cn31.html#DebarDW99 http://dx.doi.org/10.1016/S1389-1286(98)00017-6