The base-rate fallacy and the difficulty of intrusion detection
A data mining framework for building intrusion detection models