Detecting insider threats by monitoring system call activity
Intrusion Detection Using Sequences of System Calls