Molina J, Cukier M.  2009.  Evaluating Files to Audit for Detecting Intrusions in FileSystem Data. :163-170.