[Jackson91] K. Jackson, D. DuBois, and C. Stallings. An Expert System Application for Network Intrusion Detection. Proceedings of the 14th National Computer Security Conference, October 1991. [This paper describes the Network Anomoly Detection and Intrusion Reporter (NADIR) which was an early prototype intrusion detection system exploiting audit information from multiple systems to detect anomolous use.]