Sequence Covering for Efficient Host-Based Intrusion Detection
Replacing suffix trees with enhanced suffix arrays