1Abbes T, Bouhoula A, Rusinowitch M. Protocol analysis in intrusion detection using decision tree[A]. Proceeding of the International Conference on Information Technology: Coding and Computing (ITCC'04) [C]. Los Alamitos, USA:IEEE Computer Society Press, 2004. 404-409.
2Kruegel C, Toth T. Using decision trees to improve signature-based intrusion detection[A]. Proceeding of RAID'2003 [C]. Berlin Heidelberg New York: Springer-Verlag, 2003.173-191.
3Erbacher R F, Frincke D. Visualization in detection of intrusions and misuse in large scale networks[A]. Proceeding of the International Conference on Information Visualization '2000[C]. Los Alamitos, USA: IEEE Computer Society Press, 2000. 294-299.
4Spitzner L. The honeynet project: Trapping the hackers[J]. IEEE Security and Privacy, 2003, 1(2): 15-23.
5Anderson J P.Computer security thread monitoring and surveillance[R]. Fort Washington, USA: James P Anderson Co, 1980.
6Denning D E. An intrusion-detection model[J]. IEEE Transactions on Software Engineering, 1987, 13(2): 222-232.
7Kahn C, Porras P, Staniford-Chen, et al. A common intrusion detection framework[EB/OL]. 1998. http:/www.isi.edu/gost/cidf/papers/cidf-jcs.ps.
8Teng H S, Chen K, Lu S C. Security audit trail analysis using inductively generated predictive rules[A]. Proceeding of the Sixth Conference on Artificial Intelligence Applications[C]. Los Alamitos, USA: IEEE Computer Society Press, 1990. 24-29.
9Crosbie M, Spafford E. Applying genetic programming to intrusion detection[R]. West Lafayette, USA: Purdue University, Department of Computer Sciences, 1995.
10Lane T, Brodley C E. Temporal sequence learning and data reduction for anomaly detection[J].ACM Transactions on Information and System Security, 1999, 2(3): 295-331.
