Anomaly detection model based on data stream clustering
The base-rate fallacy and the difficulty of intrusion detection