A survey of network anomaly detection techniques
Service specific anomaly detection for network intrusion detection