Investigating hidden Markov models capabilities in anomaly detection
A framework for constructing features and models for intrusion detection systems