Activity monitoring: noticing interesting changes in behavior
Approaches to Online Learning and Concept Drift for User Identification in Computer Security