Dorothy E. Denning (1987). An Intrusion-Detection Model. IEEE Transactions on Software Engineering. https://doi.org/10.1109/tse.1987.232894