Learning nonstationary models of normal network traffic for detecting novel attacks.

Matthew V. Mahoney, Philip K. Chan

Browse the full KDD paper archive.