A Comparative Evaluation of Two Algorithms for Windows Registry Anomaly Detection
a geometric framework for unsupervised anomaly detection : detecting intrusions in unlabeled data .