1
Phillip Andrew Porras, Magnus Almgren, Ulf E Lindqvist, Steven Mark Dawson: Application-layer anomaly and misuse detection. SRI International, Kin Wah Tong Esq, Patterson & Sheridan, November 28, 2006: US07143444 (26 worldwide citation)

A method includes passing a request for data received by a first server process executing in a first server to a detection process that includes packing a subset of the data into an analysis format and passing the subset to an analysis process.


2
Phillip Andrew Porras, Magnus Almgren, Ulf E Lindqvist, Steven Mark Dawson: Application-layer anomaly and misuse detection. Moser Patterson & Sheridan, May 29, 2003: US20030101358-A1

A method includes passing a request for data received by a first server process executing in a first server to a detection process that includes packing a subset of the data into an analysis format and passing the subset to an analysis process.