@inbook{lee_cabrera_thomas_balwalli_saluja_zhang_2002, title={Performance adaptation in real-time intrusion detection systems}, volume={2516}, ISBN={3540000208}, booktitle={Recent advances in intrusion detection, 5th international symposium, RAID 2002, Zurich, Switzerland, October 16-18, 2002: Proceedings}, publisher={Berlin; New York: Springer}, author={Lee, W. and Cabrera, J. B. D. and Thomas, A. and Balwalli, N. and Saluja, S. and Zhang, Y.}, editor={A. Wespi, G. Vigna and Deri, L.Editors}, year={2002}, pages={252–273} }
 @inbook{lee_nimbalkar_yee_patil_desai_tran_stolfo_2000, title={A data mining and CIDF based approach for detecting novel and distributed intrusions}, volume={1907}, ISBN={3540410856}, booktitle={Recent advances in intrusion detection: Third international workshop, RAID 2000, Toulouse, France, October 2-4, 2000: Proceedings}, publisher={Berlin; New York: Springer}, author={Lee, W. and Nimbalkar, R. A. and Yee, K. K. and Patil, S. B. and Desai, P. H. and Tran, T. T. and Stolfo, S. J.}, year={2000}, pages={49–65} }
 @article{lee_stolfo_mok_2000, title={Adaptive intrusion detection: A data mining approach}, volume={14}, number={6}, journal={Artificial Intelligence (New York, N.Y. : 1970)}, author={Lee, W. K. and Stolfo, S. J. and Mok, K. W.}, year={2000}, pages={533–567} }