Storage-based Intrusion Detection: Watching Storage Activity for Suspicious Behavior. - Adam G. Pennington; John D. Strunk; John Linwood Griffin; Craig A. N. Soules; Garth R. Goodson; Gregory R. Ganger (USENIX Security Symposium, 2003)

Storage-Based Intrusion Detection. - Adam G. Pennington; John Linwood Griffin; John S. Bucy; John D. Strunk; Gregory R. Ganger (ACM Trans. Inf. Syst. Secur., 2010)