Salvatore J. Stolfo Frank Apap Eleazar Eskin Katherine Heller Shlomo Hershkop Andrew Honig Krysta Marie Svore A comparative evaluation of two algorithms for Windows Registry Anomaly Detection. 659-693 2005 13 Journal of Computer Security 4 http://iospress.metapress.com/openurl.asp?genre=article&issn=0926-227X&volume=13&issue=4&spage=659 db/journals/jcs/jcs13.html#StolfoAEHHHS05