Detecting insider threats by monitoring system call activity
A Data Mining Framework for Constructing Features and Models for Intrusion Detection Systems