[Smaha88] S. Smaha, Haystack: An Intrusion Detection System, Proceedings of the 4th Aerospace Computer Security Applications Conference, Dec. 1988, pp37-44. [This paper describes an early version of an intrusion detection system using a combination of anomoly detection and known attack pattern detection.]