Jesus Molina, Xavier Chorin, Michel Cukier. Filesystem Activity Following a SSH Compromise: An Empirical Study of File Sequences. In Kil-Hyun Nam, Gwangsoo Rhee, editors, Information Security and Cryptology - ICISC 2007, 10th International Conference, Seoul, Korea, November 29-30, 2007, Proceedings. Volume 4817 of Lecture Notes in Computer Science, pages 144-155, Springer, 2007. [doi]
Abstract is missing.