Extrusion Detection: Security Monitoring for Internal Intrusions