Geoffrey Mazeroff Jens Gregor Michael G. Thomason Richard Ford Probabilistic suffix models for API sequence analysis of Windows XP applications. 90-101 2008 41 Pattern Recognition 1 http://dx.doi.org/10.1016/j.patcog.2007.04.006 db/journals/pr/pr41.html#MazeroffGTF08