Intrusion Detection Using Sequences of System Calls
A Pattern Matching Model for Misuse Intrusion Detection