Assessing degree of intrusion scope (DIS): a statistical strategy for anomaly based intrusion detection
Eigenspace-based anomaly detection in computer systems