An Achilles' Heel in Signature-Based IDS: Squealing False Positives in SNORT
Testing Intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by Lincoln Laboratory