Detecting Malicious Software by Monitoring Anomalous Windows Registry Accesses. - Frank Apap; Andrew Honig; Shlomo Hershkop; Eleazar Eskin; Salvatore J. Stolfo (RAID, 2002)

A comparative evaluation of two algorithms for Windows Registry Anomaly Detection. - Salvatore J. Stolfo; Frank Apap; Eleazar Eskin; Katherine A. Heller; Shlomo Hershkop; Andrew Honig; Krysta M. Svore (J. Comput. Secur., 2005)