[Lunt88] T. F. Lunt. Automated Audit Trail Analysis and Intrusion Detection: A Survey, Proceedings of the 11th National Computer Security Conference, October 1988, p 65. [This paper summarizes work on intrusion detection with particular attention to experimental systems and their properties. It includes examples of very high false positive rates, several case studies, and covers a wide range of topics.]