Reference book on Anomaly Detection

Hi Anil,

Just as a quick note I’ve used bro data imported into mongodb to perform anomaly detection with some success. I used a different approach but http://www.cert.org/flocon/2008/presentations/balland_flocon2008.pdf may give you some ideas.

Thanks,
Chris