Process mining and security: visualization in database intrusion detection
Mining Activity Clusters From Low-level Event Logs