Insider Threat Detection using Stream Mining and Graph Mining
learning rules from system call arguments and sequences for anomaly 20 detection .