Robert Moskovitch Yuval Elovici Lior Rokach Detection of unknown computer worms based on behavioral classification of the host. 4544-4566 2008 52 Computational Statistics & Data Analysis 9 http://dx.doi.org/10.1016/j.csda.2008.01.028 db/journals/csda/csda52.html#MoskovitchER08