Network stream splitting for intrusion detection. - J. D. Judd; John C. McEachen; James Bret Michael; Daniel W. Ettlich (ICON, 2003)

Differentiating network conversation flow for intrusion detection and diagnostics. - John C. McEachen; John Zachary; Daniel W. Ettlich (ISCAS (4), 2004)

Conversation Exchange Dynamics for Real-Time Network Monitoring and Anomaly Detection. - John Zachary; John C. McEachen; Daniel W. Ettlich (IWIA, 2004)