Mimicry attacks on host-based intrusion detection systems
A data mining framework for building intrusion detection models