Title: An empirical comparison of monitoring algorithms for access anomaly detection
First published: 1989