A Network Audit System for Host-based Intrusion Detection (NASHID) in Linux.

Thomas E. Daniels, Eugene H. Spafford

Browse the full ACSAC paper archive.