# SAQL: A Stream-based Query System for Real-Time Abnormal System Behavior Detection

> Research article (USENIX Security Symposium, 2018) · cited 11× · AI/ML

**Wikidata**: [openalex:W2963404565](https://www.wikidata.org/wiki/openalex:W2963404565)  
**Source**: https://4ort.xyz/entity/saql-a-stream-based-query-system-for-real-time-abnormal-system-behavior-detection