Approaches to Online Learning and Concept Drift for User Identification in Computer Security
Learning Patterns from Unix Process Execution Traces for Intrusion Detection