Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation
NetSTAT: a network-based intrusion detection approach