Robert M. Winding, Timothy E. Wright, Michael J. Chapple: System Anomaly Detection: Mining Firewall Logs. SecureComm 2006: 1-5