Fabian Hensel: Flow-based and Packet level-based Intrusion Detection as Complementary Concepts; in: Diploma Thesis, University of Zurich, Switzerland, April 2008, URL: https://www.csg.uzh.ch/publications/fh-da.pdf.