Fixed vs. Variable-Length Patterns for Detecting Suspicious Process Behavior

Characterizing the behavior of a program using multiple-length N-grams

Proceedings of the 2000 workshop on New security paradigms

Intrusion Detection Using Variable-Length Audit Trail Patterns

RAID '00 Proceedings of the Third International Workshop on Recent Advances in Intrusion Detection

Flexible Intrusion Detection Using Variable-Length Behavior Modeling in Distributed Environment: Application to CORBA Objects

RAID '00 Proceedings of the Third International Workshop on Recent Advances in Intrusion Detection

Basic Concepts and Taxonomy of Dependable and Secure Computing

IEEE Transactions on Dependable and Secure Computing

Anomaly detection: A survey

ACM Computing Surveys (CSUR)

Modular behavior profiles in systems with shared libraries (short paper)

ICICS'06 Proceedings of the 8th international conference on Information and Communications Security