Analysis and Results of the 1999 DARPA Off-Line Intrusion Detection Evaluation
Experience with EMERALD to Date