[Soh95] B. Soh and T. Dillon Setting Optimal Intrusion-detection Thresholds, IFIP-TC11 Computers and Security, V14#7, 1995 pp621-31 [This paper uses modeling and simulation to analyze optimal thresholds for intrusion detection systems based on statistical detection methods. It clearly demonstrates some of the tradeoffs between false positives and false negatives.]