One-Class Anomaly Detection Papers
(1) One Class Support Vector Machines for Detecting Anomalous Windows Registry
Accesses http://www.gatsby.ucl.ac.uk/~heller/ocsvmpr.pdf
This paper talks about PAD and OCSVM for Detecting Anomalous Windows Registry
Accesses. Results: PAD outperforms OCSVM, reason was given.
James: The PAD algorihtm is worth implementing
(2) Cross-outlier detection: http://www.bradblock.com.s3-website-us-west-1.amazonaws.com/Cross_Outlier_Detection.pdf