Peter G. Neumann, Phillip A. Porras, Experience with EMERALD to DateID'99 Proceedings of the 1st conference on Workshop on Intrusion Detection and Network Monitoring - Volume 1. pp. 73- 80 ,(1999)
Klaus-Peter Kossakowski, Julia Allen, Christopher Alberts, Cory Cohen, Gary Ford, Responding to IntrusionsDefense Technical Information Center. ,(1999) , 10.21236/ADA360500