"ASAX: Software Architecture and Rule-base Language for Universal Audit Trail Analysis Preliminary Report on Advanced Security Audit Trail Analysis on UNIX
Built by Mark Crosbie and Ivan Krsul.
Security Archive Homepage.
COAST Project Page.
Purdue CS Dept page.