Penetration state transition analysis: A rule-based intrusion detection approach.

Phillip A. Porras, Richard A. Kemmerer

Browse the full ACSAC paper archive.