Masquerade detection using enriched command lines
A comparison of event models for Naive Bayes text classification