A simple and efficient hidden Markov model scheme for host-based anomaly intrusion detection
A framework for constructing features and models for intrusion detection systems