A Computer Host-Based User Anomaly Detection System Using the Self-Organizing Map. - Albert J. Höglund; Kimmo Hätönen; Antti S. Sorvari (IJCNN (5), 2000)