Evaluating Computer Intrusion Detection Systems: A Survey of Common Practices
A Virtual Machine Introspection Based Architecture for Intrusion Detection