NADIR: An automated system for detecting network intrusion and misuse. - Judith Hochberg; Kathleen A. Jackson; Cathy A. Stallings; J. F. McClary; David H. DuBois; Josephine Ford (Comput. Secur., 1993)

UNICORN: Misuse Detection for UNICOS(TM). - Gary G. Christoph; Kathleen A. Jackson; Michael C. Neuman; Christine L. B. Siciliano; Dennis D. Simmonds; Cathy A. Stallings; Joseph L. Thompson (SC, 1995)