Journal articles (ReMIND)
Linear-Time Computation of Similarity Measures for Sequential Data.
Konrad Rieck and Pavel Laskov, Journal of Machine Learning Research, Vol. 9, pp. 1-26, 2008. [PDF]

Articles in Conference Proceedings (ReMIND)
Incorporation of application layer protocol syntax into anomaly detection.
Patrick Düssel, Christian Gehl, Pavel Laskov and Konrad Rieck. In Proceedings of the International Conference on Information Systems Security, pp. 188-202, 2008. [PDF]

An architecture for inline anomaly detection.
Tammo Krüger, Christian Gehl, Konrad Rieck, Pavel Laskov. In Proceedings of the European Conference on Computer Network Defense, pp. 11-18, 2008. [PDF]

Automatic feature selection for anomaly detection.
Marius Kloft, Ulf Brefeld, Patrick Düssel, Christian Gehl, Pavel and Laskov. In Proceedings of the 1st ACM Workshop on AISec. pp. 71-76, 2008. [PDF]

A Self-Learning System for Detection of Anomalous SIP Messages.
Konrad Rieck, Stefan Wahl, Pavel Laskov, Peter Domschitz and Klaus-Robert Müller. Principles, Systems and Applications of IP Telecommunications (IPTCOMM), Second International Conference, pp. 90-106, 2008. [PDF]

Learning and Classification of Malware Behavior.
Konrad Rieck, Thorsten Holz, Carsten Willems, Patrick Düssel and Pavel Laskov. Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA), Fifth International Conference, pp. 108-125, 2008. [PDF]

Journal articles (MIND)
Language Models for Detection of Unknown Attacks in Network Traffic.
Konrad Rieck and Pavel Laskov. Journal in Computer Virology, 2(4), pp. 243-256, Springer, 2007. [PDF]

Incremental support vector learning: analysis, implementation and applications.
Pavel Laskov, Christian Gehl, Stefan Krüger and Klaus-Robert Müller. Journal of Machine Learning Research, 7, pp. 1909-1936, 2006. [PDF]

Intrusion detection in unlabeled data with quarter-sphere Support-Vector Machines.
Pavel Laskov, Christin Schäfer, Igor Kotenko and Klaus-Robert Müller. Praxis der Informationsverarbeitung und Kommunikation 27, pp. 228-236, 2004.

Articles in Conference Proceedings (MIND)
Computation of Similarity Measures for Sequential Data using Generalized Suffix Trees.
Konrad Rieck, Pavel Laskov and Sören Sonnenburg. Advances in Neural Information Processing Systems 19 (NIPS), pp. 1177-1184, MIT Press, 2007. [PDF]

Efficient Algorithms for Similarity Measures over Sequential Data: A Look Beyond Kernels.
Konrad Rieck, Pavel Laskov and Klaus-Robert Müller. Pattern Recognition, 28th DAGM Symposium, pp. 374-383, 2006. [PDF]

Detecting Unknown Network Attacks using Language Models.
Konrad Rieck and Pavel Laskov. Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA), Third International Conference, pp. 74-90, 2006 [PDF]

Learning intrusion detection: supervised or unsupervised?
Pavel Laskov, Patrick Düssel, Christin Schäfer and Konrad Rieck. Image Analysis and Processing - ICIAP 2005, 13th International Conference, pp. 50-57, 2005. [PDF]

Visualization of anomaly detection using prediction sensitivity.
Pavel Laskov, Konrad Rieck, Christin Schäfer, Klaus-Robert Müller. Sicherheit 2005 (Sicherheit - Schutz und Zuverlässigkeit), 2. Jahrestagung des FB Sicherheit der GI, pp. 197-208, 2005. [PDF]

Intrusion detection in unlabeled data with quarter-sphere Support-Vector Machines.
Pavel Laskov, Christin Schäfer and Igor Kotenko. Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA), First International Conference, pp. 71-82, 2004. [PDF]