Jacob Zimmermann, Ludovic Mé, Christophe Bidan: Introducing Reference Flow Control for Detecting Intrusion Symptoms at the OS Level. RAID 2002: 292-306