So far, i've only been able to locate a white paper produced by SRI International from 1995 that discusses the theory and practice of Next-Generation Intrusion Dectection Expert Systems.

The paper...