A Comparative Evaluation of Two Algorithms for Windows Registry Anomaly Detection
Estimating the Support of a High-Dimensional Distribution