Contextual information fusion for intrusion detection: a survey and taxonomy
Learning nonstationary models of normal network traffic for detecting novel attacks