a clustering - based method for unsupervised intrusion detections .
A framework for constructing features and models for intrusion detection systems