[Lankewicz91] L. Lankewicz and M. Bernard, Real-time Anomaly Detection Using a Non-parametric Pattern Recognition Approach Proceedings of the 7th Annual Computer Security Applications Conference, December 2-6, 1991, San Antonio, TX. [This paper presents an non-parametric variation on the statistical characterization of behavior in an effort to reduce false-positives in detecting anomalous behavior.]