USTAT: a real-time intrusion detection system for UNIX. - Koral Ilgun (S&P, 1993)

State Transition Analysis: A Rule-Based Intrusion Detection Approach. - Koral Ilgun; Richard A. Kemmerer; Phillip A. Porras (IEEE Trans. Software Eng., 1995)