Fixed vs. Variable-Length Patterns for Detecting Suspicious Process Behavior

Hervé Debar, Marc Dacier, Mehdi Nassehi, Andreas Wespi. Fixed vs. Variable-Length Patterns for Detecting Suspicious Process Behavior. In Jean-Jacques Quisquater, Yves Deswarte, Catherine Meadows, Dieter Gollmann, editors, Computer Security - ESORICS 98, 5th European Symposium on Research in Computer Security, Louvain-la-Neuve, Belgium, September 16-18, 1998, Proceedings. Volume 1485 of Lecture Notes in Computer Science, pages 1-15, Springer, 1998. [doi]

@inproceedings{DebarDNW98,
  title = {Fixed vs. Variable-Length Patterns for Detecting Suspicious Process Behavior},
  author = {Hervé Debar and Marc Dacier and Mehdi Nassehi and Andreas Wespi},
  year = {1998},
  doi = {10.1007/BFb0055852},
  url = {http://dx.doi.org/10.1007/BFb0055852},
  researchr = {https://researchr.org/publication/DebarDNW98},
  cites = {0},
  citedby = {0},
  pages = {1-15},
  booktitle = {Computer Security - ESORICS 98, 5th European Symposium on Research in Computer Security, Louvain-la-Neuve, Belgium, September 16-18, 1998, Proceedings},
  editor = {Jean-Jacques Quisquater and Yves Deswarte and Catherine Meadows and Dieter Gollmann},
  volume = {1485},
  series = {Lecture Notes in Computer Science},
  publisher = {Springer},
  isbn = {3-540-65004-0},
}