Detecting insider threats by monitoring system call activity
A Pattern Matching Model for Misuse Intrusion Detection