anomaly detection in computer security and an application to file system accesses .
A Markov Chain Model of Temporal Behavior for Anomaly Detection