[Vaccaro89] H.S. Vaccaro and G.E. Liepens, Detection of Anomalous Computer Session Activity, Proceedings of the 1989 IEEE Symposium on Research in Security and Privacy, pp. 280-289. [This paper describes a system for detecting anomalous behavior based on statistically derived rules. Alerts are produced for subsequent review by security officers before response is considered.]