[Winkler88] J. R. Winkler, A UNIX Prototype for Intrusion and Anomaly Detection in Secure Networks, Proceedings of the 11th National Computer Security Conference, October 1988, p 115