Evaluation of the performance of ID systems in a switched and distributed environment: the RealSecure case study

An Intrusion-Detection Model

Dorothy E. Denning · IEEE Transactions on Software Engineering · 1987 · 3.4K citations

Computing, Computer Science, Cybersecurity +17

EMERALD: Event Monitoring Enabling Responses to Anomalous Live Disturbances

Phillip Porras, Peter G. Neumann, Ravenswood Avenue · 2002 · 710 citations

Computing, Cybersecurity, Systems Engineering +17

Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection

Thomas H. Ptacek, Timothy N. Newsham · Defense Technical Information Center (DTIC) · 1998 · 656 citations

Computing, Computer Science, Computer Systems +15

Classification and detection of computer intrusions

Sandeep Kumar · Purdue e-Pubs (Purdue University System) · 1996 · 384 citations

Computing, Computer Science, Cybersecurity +12

A network security monitor

L.T. Heberlein, Gihan Dias, Karl Levitt et al. · 1990 · 384 citations

Computing, Computer Engineering, Computer Science +16