| 2000 | LAMBDA: A Language to Model a Database for Detection of Attacks. | Frdric Cuppens, Rodolphe Ortalo |
| 2000 | Transaction-Based Pseudonyms in Audit Data for Privacy Respecting Intrusion Detection. | Joachim Biskup, Ulrich Flegel |
| 2000 | Using Rule-Based Activity Descriptions to Evaluate Intrusion-Detection Systems. | Dominique Alessandri |
| 1999 | Intrusion Detection for an On-Going Attack. | Jim Yuill, Shyhtsun Felix Wu, Fengmin Gong, Ming-Yuh Huang |
| 1999 | Building an Intrusion-Detection System to Detect Suspicious Process Behavior. | Andreas Wespi, Herv Debar |
| 1999 | Audit logs: to keep or not to keep? | Christopher Wee |
| 1999 | Intrusion Detection, Internet Law Enforcement and Insurance Coverage to Accelerate the Proliferation of Internet Business Singapore. | Christopher Ting, Tiang Hwee Ong, Yong Tai Tan, Pek Yong Ng |
| 1999 | IDS Standards: Lessons Learned to Date. | Stuart Staniford-Chen |
| 1999 | New directions for the AAFID architecture. | Eugene H. Spafford, Diego Zamboni |
| 1999 | Nidsbench - a Network Intrusion Detection Test Suite. | Dug Song, G. Shaffer, M. Undy |
| 1999 | Anomaly Intrusion Detection Systems: Handling Temporal Relations Between Events. | Alexandr Seleznyov, Seppo Puuronen |
| 1999 | A Study in the Feasibility of Performing Host-Based Anomaly Detection on Windows NT. | Aaron Schwartzbard, Anup K. Ghosh |
| 1999 | Intrusion Detection and Isolation Protocol: Automated Response to Attacks. | Jeff Rowe |
| 1999 | Micael: An Autonomous Mobile Agent System to Protect New Generation Networked Applications. | Jose Duarte de Queiroz, Luiz F. Rust da Costa Carmo, Luci Pirmez |
| 1999 | Session State Transition Based Large Network IDS. | Qianli Zhang, Xing Li |
| 1999 | Defending against network IDS evasion. | Vern Paxson |
| 1999 | SNMS - Shadow Network Management System. | Tiang Hwee Ong, Chung Pheng Tan, Yong Tai Tan, Christopher Ting |
| 1999 | Defending against a Denial-of-Service Attack on TCP. | Pars Mutaf |
| 1999 | Mobile Agent Attack Resistant Distributed Hierarchical Intrusion Detection Systems. | Peter Mell, Mark McLarnon |
| 1999 | Towards trapping wily intruders in the large. | Glenn Mansfield |
| 1999 | A Data Mining Analysis of RTID Alarms. | Stefanos Manganaris, Marvin Christensen, Dan Zerkle, Keith Hermiz |
| 1999 | Privacy vs. Intrusion Detection Analysis. | Emilie Lundin, Erland Jonsson |
| 1999 | Results of the DARPA 1998 Offline Intrusion Detection Evaluation. | Richard Lippmann, Robert K. Cunningham, David J. Fried, Isaac Graf, Kris R. Kendall, Seth E. Webster, Marc A. Zissman |
| 1999 | Improving Intrusion Detection Performance using Keyword Selection and Neural Networks. | Richard Lippmann, Robert K. Cunningham |
| 1999 | Combining Knowledge Discovery and Knowledge Engineering to Build IDSs. | Wenke Lee, Salvatore J. Stolfo |