A Survey of Insider Attack Detection Research
Detecting insider threats by monitoring system call activity