A framework for constructing features and models for intrusion detection systems
A data mining framework for building intrusion detection models