[Porras92] P.A. Porras and R.A. Kemmerer, Penetration State Transition Analysis - A Rule-Based Intrusion Detection Approach, Proceedings of the eighth annual Computer Security Applications Conference, San Antonio, TX, 1992. pp220-229.