Information-theoretic measures for anomaly detection
Data Mining Approaches for Intrusion Detection