Data mining for network intrusion detection
mining needle in a haystack : classifying rare classes via two - phase rule induction .