Kwong H. Yung. Detecting Long Connection Chains of Interactive Terminal Sessions. In Andreas Wespi, Giovanni Vigna, Luca Deri, editors, Recent Advances in Intrusion Detection, 5th International Symposium, RAID 2002, Zurich, Switzerland, October 16-18, 2002, Proceedings. Volume 2516 of Lecture Notes in Computer Science, pages 1-16, Springer, 2002. [doi]